--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7108fbd25fc15b72f6a9ccfe016746f534c9fbef0786604aba7acfb34b097cbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7108fbd25fc15b72f6a9ccfe016746f534c9fbef0786604aba7acfb34b097cbd"} {"level":"debug","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7108fbd25fc15b72f6a9ccfe016746f534c9fbef0786604aba7acfb34b097cbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:28:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:28:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7108fbd25fc15b72f6a9ccfe016746f534c9fbef0786604aba7acfb34b097cbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7108fbd25fc15b72f6a9ccfe016746f534c9fbef0786604aba7acfb34b097cbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:28:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:28:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641"} {"level":"info","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7108fbd25fc15b72f6a9ccfe016746f534c9fbef0786604aba7acfb34b097cbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:28:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:28:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7108fbd25fc15b72f6a9ccfe016746f534c9fbef0786604aba7acfb34b097cbd"} {"level":"info","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7108fbd25fc15b72f6a9ccfe016746f534c9fbef0786604aba7acfb34b097cbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7108fbd25fc15b72f6a9ccfe016746f534c9fbef0786604aba7acfb34b097cbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:28:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:28:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7108fbd25fc15b72f6a9ccfe016746f534c9fbef0786604aba7acfb34b097cbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7108fbd25fc15b72f6a9ccfe016746f534c9fbef0786604aba7acfb34b097cbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7108fbd25fc15b72f6a9ccfe016746f534c9fbef0786604aba7acfb34b097cbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:28:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:28:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7108fbd25fc15b72f6a9ccfe016746f534c9fbef0786604aba7acfb34b097cbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641"} {"level":"error","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7108fbd25fc15b72f6a9ccfe016746f534c9fbef0786604aba7acfb34b097cbd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7108fbd25fc15b72f6a9ccfe016746f534c9fbef0786604aba7acfb34b097cbd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7108fbd25fc15b72f6a9ccfe016746f534c9fbef0786604aba7acfb34b097cbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:28:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:28:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7108fbd25fc15b72f6a9ccfe016746f534c9fbef0786604aba7acfb34b097cbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7108fbd25fc15b72f6a9ccfe016746f534c9fbef0786604aba7acfb34b097cbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:28:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:28:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7108fbd25fc15b72f6a9ccfe016746f534c9fbef0786604aba7acfb34b097cbd"} {"level":"error","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7108fbd25fc15b72f6a9ccfe016746f534c9fbef0786604aba7acfb34b097cbd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7108fbd25fc15b72f6a9ccfe016746f534c9fbef0786604aba7acfb34b097cbd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7108fbd25fc15b72f6a9ccfe016746f534c9fbef0786604aba7acfb34b097cbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7108fbd25fc15b72f6a9ccfe016746f534c9fbef0786604aba7acfb34b097cbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7108fbd25fc15b72f6a9ccfe016746f534c9fbef0786604aba7acfb34b097cbd"} {"level":"debug","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:28:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:28:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:28:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:28:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7108fbd25fc15b72f6a9ccfe016746f534c9fbef0786604aba7acfb34b097cbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:28:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:28:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7108fbd25fc15b72f6a9ccfe016746f534c9fbef0786604aba7acfb34b097cbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641"} {"level":"info","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7108fbd25fc15b72f6a9ccfe016746f534c9fbef0786604aba7acfb34b097cbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7108fbd25fc15b72f6a9ccfe016746f534c9fbef0786604aba7acfb34b097cbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641"} {"level":"debug","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:28:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:28:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7108fbd25fc15b72f6a9ccfe016746f534c9fbef0786604aba7acfb34b097cbd"} {"level":"info","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:28:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:28:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641"} {"level":"debug","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641"} {"level":"debug","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:28:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:28:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:28:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:28:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641"} {"level":"debug","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641"} {"level":"debug","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:28:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:28:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641"} {"level":"info","ts":"2026-07-14T08:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18e2a3edc415161b14f95f8d107871be83050af980e0d0df8b01c5083c64a6af"} {"level":"info","ts":"2026-07-14T08:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea793180b3d88e5dd7b9fad6630630d5689f63a2e9e9f2824cfc8e3100181d23"} {"level":"info","ts":"2026-07-14T08:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dcb5937eee070f1f0a2452d4bf5e1970ddc59adbf49044da6670ca7972b4fc6c"} {"level":"info","ts":"2026-07-14T08:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd2daa7aef3abb22dfb545c26dd356f1292822bb8de565ae66fa3a6da7a25b3c"} {"level":"info","ts":"2026-07-14T08:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/763b51b3d7f4b3f9a748c86ef88f5c434e3a5c893ff37dea284733cf21d61083"} {"level":"info","ts":"2026-07-14T08:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7108fbd25fc15b72f6a9ccfe016746f534c9fbef0786604aba7acfb34b097cbd"} {"level":"info","ts":"2026-07-14T08:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6786da89dc363e4db0e7fd4f3ef5ec418a85488251a6d2f60b72061b7ea5641"} {"level":"info","ts":"2026-07-14T08:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85bf7624347b855fb3f5d492ce76045f8e858941258b9e1a41f5d4117e86108b"} {"level":"debug","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0352dfd7793bb10611cbb5728d974f362364b047008f8c740877d1e3472cdd17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0352dfd7793bb10611cbb5728d974f362364b047008f8c740877d1e3472cdd17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0352dfd7793bb10611cbb5728d974f362364b047008f8c740877d1e3472cdd17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0352dfd7793bb10611cbb5728d974f362364b047008f8c740877d1e3472cdd17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0352dfd7793bb10611cbb5728d974f362364b047008f8c740877d1e3472cdd17"} {"level":"debug","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0352dfd7793bb10611cbb5728d974f362364b047008f8c740877d1e3472cdd17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0352dfd7793bb10611cbb5728d974f362364b047008f8c740877d1e3472cdd17"} {"level":"debug","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0352dfd7793bb10611cbb5728d974f362364b047008f8c740877d1e3472cdd17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0352dfd7793bb10611cbb5728d974f362364b047008f8c740877d1e3472cdd17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0352dfd7793bb10611cbb5728d974f362364b047008f8c740877d1e3472cdd17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e94f0c1520cade42a181072092bd432a35e136f8ee9d9eb533e22d31ff5c4571","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e94f0c1520cade42a181072092bd432a35e136f8ee9d9eb533e22d31ff5c4571","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0352dfd7793bb10611cbb5728d974f362364b047008f8c740877d1e3472cdd17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e94f0c1520cade42a181072092bd432a35e136f8ee9d9eb533e22d31ff5c4571","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e94f0c1520cade42a181072092bd432a35e136f8ee9d9eb533e22d31ff5c4571","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e94f0c1520cade42a181072092bd432a35e136f8ee9d9eb533e22d31ff5c4571"} {"level":"debug","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e94f0c1520cade42a181072092bd432a35e136f8ee9d9eb533e22d31ff5c4571","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e94f0c1520cade42a181072092bd432a35e136f8ee9d9eb533e22d31ff5c4571"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0352dfd7793bb10611cbb5728d974f362364b047008f8c740877d1e3472cdd17"} {"level":"info","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e94f0c1520cade42a181072092bd432a35e136f8ee9d9eb533e22d31ff5c4571","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e94f0c1520cade42a181072092bd432a35e136f8ee9d9eb533e22d31ff5c4571","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e94f0c1520cade42a181072092bd432a35e136f8ee9d9eb533e22d31ff5c4571"} {"level":"info","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e94f0c1520cade42a181072092bd432a35e136f8ee9d9eb533e22d31ff5c4571","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e94f0c1520cade42a181072092bd432a35e136f8ee9d9eb533e22d31ff5c4571","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e94f0c1520cade42a181072092bd432a35e136f8ee9d9eb533e22d31ff5c4571","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e94f0c1520cade42a181072092bd432a35e136f8ee9d9eb533e22d31ff5c4571"} {"level":"debug","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e94f0c1520cade42a181072092bd432a35e136f8ee9d9eb533e22d31ff5c4571","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e94f0c1520cade42a181072092bd432a35e136f8ee9d9eb533e22d31ff5c4571"} {"level":"debug","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e94f0c1520cade42a181072092bd432a35e136f8ee9d9eb533e22d31ff5c4571","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e94f0c1520cade42a181072092bd432a35e136f8ee9d9eb533e22d31ff5c4571"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e94f0c1520cade42a181072092bd432a35e136f8ee9d9eb533e22d31ff5c4571","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e94f0c1520cade42a181072092bd432a35e136f8ee9d9eb533e22d31ff5c4571","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e94f0c1520cade42a181072092bd432a35e136f8ee9d9eb533e22d31ff5c4571","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e94f0c1520cade42a181072092bd432a35e136f8ee9d9eb533e22d31ff5c4571","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e94f0c1520cade42a181072092bd432a35e136f8ee9d9eb533e22d31ff5c4571","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e94f0c1520cade42a181072092bd432a35e136f8ee9d9eb533e22d31ff5c4571"} {"level":"debug","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e94f0c1520cade42a181072092bd432a35e136f8ee9d9eb533e22d31ff5c4571","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e94f0c1520cade42a181072092bd432a35e136f8ee9d9eb533e22d31ff5c4571"} {"level":"debug","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e94f0c1520cade42a181072092bd432a35e136f8ee9d9eb533e22d31ff5c4571","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e94f0c1520cade42a181072092bd432a35e136f8ee9d9eb533e22d31ff5c4571"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e94f0c1520cade42a181072092bd432a35e136f8ee9d9eb533e22d31ff5c4571","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e94f0c1520cade42a181072092bd432a35e136f8ee9d9eb533e22d31ff5c4571","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e94f0c1520cade42a181072092bd432a35e136f8ee9d9eb533e22d31ff5c4571"} {"level":"debug","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2"} {"level":"info","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2"} {"level":"debug","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2"} {"level":"debug","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2"} {"level":"debug","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2"} {"level":"debug","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe4b41e59814b56542d18a1aa38c384b5c907c8ee6c4852f4a028de84e59ca9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe4b41e59814b56542d18a1aa38c384b5c907c8ee6c4852f4a028de84e59ca9f"} {"level":"info","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe4b41e59814b56542d18a1aa38c384b5c907c8ee6c4852f4a028de84e59ca9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe4b41e59814b56542d18a1aa38c384b5c907c8ee6c4852f4a028de84e59ca9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe4b41e59814b56542d18a1aa38c384b5c907c8ee6c4852f4a028de84e59ca9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2"} {"level":"info","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe4b41e59814b56542d18a1aa38c384b5c907c8ee6c4852f4a028de84e59ca9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe4b41e59814b56542d18a1aa38c384b5c907c8ee6c4852f4a028de84e59ca9f"} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe4b41e59814b56542d18a1aa38c384b5c907c8ee6c4852f4a028de84e59ca9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2"} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe4b41e59814b56542d18a1aa38c384b5c907c8ee6c4852f4a028de84e59ca9f"} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2"} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2"} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2"} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98a7ebba5212c3be299e242ec3538466c877438b6e1da04b294186489a2fadec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98a7ebba5212c3be299e242ec3538466c877438b6e1da04b294186489a2fadec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98a7ebba5212c3be299e242ec3538466c877438b6e1da04b294186489a2fadec"} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98a7ebba5212c3be299e242ec3538466c877438b6e1da04b294186489a2fadec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98a7ebba5212c3be299e242ec3538466c877438b6e1da04b294186489a2fadec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98a7ebba5212c3be299e242ec3538466c877438b6e1da04b294186489a2fadec"} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98a7ebba5212c3be299e242ec3538466c877438b6e1da04b294186489a2fadec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98a7ebba5212c3be299e242ec3538466c877438b6e1da04b294186489a2fadec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98a7ebba5212c3be299e242ec3538466c877438b6e1da04b294186489a2fadec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98a7ebba5212c3be299e242ec3538466c877438b6e1da04b294186489a2fadec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2"} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e8c4d043ed9194f0e30666b8c414e80ac0c6eab586f4f5643e9b06ef988769","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98a7ebba5212c3be299e242ec3538466c877438b6e1da04b294186489a2fadec"} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e8c4d043ed9194f0e30666b8c414e80ac0c6eab586f4f5643e9b06ef988769","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e8c4d043ed9194f0e30666b8c414e80ac0c6eab586f4f5643e9b06ef988769","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e8c4d043ed9194f0e30666b8c414e80ac0c6eab586f4f5643e9b06ef988769","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e8c4d043ed9194f0e30666b8c414e80ac0c6eab586f4f5643e9b06ef988769","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"28e8c4d043ed9194f0e30666b8c414e80ac0c6eab586f4f5643e9b06ef988769","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"28e8c4d043ed9194f0e30666b8c414e80ac0c6eab586f4f5643e9b06ef988769\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28e8c4d043ed9194f0e30666b8c414e80ac0c6eab586f4f5643e9b06ef988769","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e8c4d043ed9194f0e30666b8c414e80ac0c6eab586f4f5643e9b06ef988769"} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28e8c4d043ed9194f0e30666b8c414e80ac0c6eab586f4f5643e9b06ef988769","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e8c4d043ed9194f0e30666b8c414e80ac0c6eab586f4f5643e9b06ef988769"} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51d170315391a6f0e17d67afddec4744d6fd1ac7ebb03c832c496766f8967a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51d170315391a6f0e17d67afddec4744d6fd1ac7ebb03c832c496766f8967a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51d170315391a6f0e17d67afddec4744d6fd1ac7ebb03c832c496766f8967a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51d170315391a6f0e17d67afddec4744d6fd1ac7ebb03c832c496766f8967a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e8c4d043ed9194f0e30666b8c414e80ac0c6eab586f4f5643e9b06ef988769","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28e8c4d043ed9194f0e30666b8c414e80ac0c6eab586f4f5643e9b06ef988769"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51d170315391a6f0e17d67afddec4744d6fd1ac7ebb03c832c496766f8967a3"} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e8c4d043ed9194f0e30666b8c414e80ac0c6eab586f4f5643e9b06ef988769","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51d170315391a6f0e17d67afddec4744d6fd1ac7ebb03c832c496766f8967a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28e8c4d043ed9194f0e30666b8c414e80ac0c6eab586f4f5643e9b06ef988769","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51d170315391a6f0e17d67afddec4744d6fd1ac7ebb03c832c496766f8967a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51d170315391a6f0e17d67afddec4744d6fd1ac7ebb03c832c496766f8967a3"} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87fbad444a47962a5e8b4b3f0a2561db8add0ed2c16ff49ea5250d86bf155d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87fbad444a47962a5e8b4b3f0a2561db8add0ed2c16ff49ea5250d86bf155d12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87fbad444a47962a5e8b4b3f0a2561db8add0ed2c16ff49ea5250d86bf155d12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87fbad444a47962a5e8b4b3f0a2561db8add0ed2c16ff49ea5250d86bf155d12","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e8c4d043ed9194f0e30666b8c414e80ac0c6eab586f4f5643e9b06ef988769"} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87fbad444a47962a5e8b4b3f0a2561db8add0ed2c16ff49ea5250d86bf155d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87fbad444a47962a5e8b4b3f0a2561db8add0ed2c16ff49ea5250d86bf155d12"} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87fbad444a47962a5e8b4b3f0a2561db8add0ed2c16ff49ea5250d86bf155d12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87fbad444a47962a5e8b4b3f0a2561db8add0ed2c16ff49ea5250d86bf155d12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51d170315391a6f0e17d67afddec4744d6fd1ac7ebb03c832c496766f8967a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d51d170315391a6f0e17d67afddec4744d6fd1ac7ebb03c832c496766f8967a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87fbad444a47962a5e8b4b3f0a2561db8add0ed2c16ff49ea5250d86bf155d12"} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51d170315391a6f0e17d67afddec4744d6fd1ac7ebb03c832c496766f8967a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51d170315391a6f0e17d67afddec4744d6fd1ac7ebb03c832c496766f8967a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87fbad444a47962a5e8b4b3f0a2561db8add0ed2c16ff49ea5250d86bf155d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87fbad444a47962a5e8b4b3f0a2561db8add0ed2c16ff49ea5250d86bf155d12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87fbad444a47962a5e8b4b3f0a2561db8add0ed2c16ff49ea5250d86bf155d12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c853abaf939418ac5b5187f3a0f0674d21d85b39e57ba1f88d91e7787cef3168","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51d170315391a6f0e17d67afddec4744d6fd1ac7ebb03c832c496766f8967a3"} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c853abaf939418ac5b5187f3a0f0674d21d85b39e57ba1f88d91e7787cef3168","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87fbad444a47962a5e8b4b3f0a2561db8add0ed2c16ff49ea5250d86bf155d12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81255781f668990d65fd4ccf9e0dcb7d9b5cbfd4562c6e79d5b69cdb966eed55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c853abaf939418ac5b5187f3a0f0674d21d85b39e57ba1f88d91e7787cef3168"} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81255781f668990d65fd4ccf9e0dcb7d9b5cbfd4562c6e79d5b69cdb966eed55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c853abaf939418ac5b5187f3a0f0674d21d85b39e57ba1f88d91e7787cef3168","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c853abaf939418ac5b5187f3a0f0674d21d85b39e57ba1f88d91e7787cef3168"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c853abaf939418ac5b5187f3a0f0674d21d85b39e57ba1f88d91e7787cef3168","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81255781f668990d65fd4ccf9e0dcb7d9b5cbfd4562c6e79d5b69cdb966eed55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c853abaf939418ac5b5187f3a0f0674d21d85b39e57ba1f88d91e7787cef3168","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87fbad444a47962a5e8b4b3f0a2561db8add0ed2c16ff49ea5250d86bf155d12"} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81255781f668990d65fd4ccf9e0dcb7d9b5cbfd4562c6e79d5b69cdb966eed55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81255781f668990d65fd4ccf9e0dcb7d9b5cbfd4562c6e79d5b69cdb966eed55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81255781f668990d65fd4ccf9e0dcb7d9b5cbfd4562c6e79d5b69cdb966eed55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81255781f668990d65fd4ccf9e0dcb7d9b5cbfd4562c6e79d5b69cdb966eed55"} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81255781f668990d65fd4ccf9e0dcb7d9b5cbfd4562c6e79d5b69cdb966eed55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81255781f668990d65fd4ccf9e0dcb7d9b5cbfd4562c6e79d5b69cdb966eed55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c853abaf939418ac5b5187f3a0f0674d21d85b39e57ba1f88d91e7787cef3168"} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81255781f668990d65fd4ccf9e0dcb7d9b5cbfd4562c6e79d5b69cdb966eed55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"979b8daebb65d3501c3a605a39f190ca7448a6e363da1212d0a1c700eb9fb40c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"979b8daebb65d3501c3a605a39f190ca7448a6e363da1212d0a1c700eb9fb40c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81255781f668990d65fd4ccf9e0dcb7d9b5cbfd4562c6e79d5b69cdb966eed55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81255781f668990d65fd4ccf9e0dcb7d9b5cbfd4562c6e79d5b69cdb966eed55"} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81255781f668990d65fd4ccf9e0dcb7d9b5cbfd4562c6e79d5b69cdb966eed55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/979b8daebb65d3501c3a605a39f190ca7448a6e363da1212d0a1c700eb9fb40c"} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"979b8daebb65d3501c3a605a39f190ca7448a6e363da1212d0a1c700eb9fb40c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["979b8daebb65d3501c3a605a39f190ca7448a6e363da1212d0a1c700eb9fb40c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"979b8daebb65d3501c3a605a39f190ca7448a6e363da1212d0a1c700eb9fb40c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81255781f668990d65fd4ccf9e0dcb7d9b5cbfd4562c6e79d5b69cdb966eed55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81255781f668990d65fd4ccf9e0dcb7d9b5cbfd4562c6e79d5b69cdb966eed55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe"} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81255781f668990d65fd4ccf9e0dcb7d9b5cbfd4562c6e79d5b69cdb966eed55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81255781f668990d65fd4ccf9e0dcb7d9b5cbfd4562c6e79d5b69cdb966eed55"} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"979b8daebb65d3501c3a605a39f190ca7448a6e363da1212d0a1c700eb9fb40c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"979b8daebb65d3501c3a605a39f190ca7448a6e363da1212d0a1c700eb9fb40c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81255781f668990d65fd4ccf9e0dcb7d9b5cbfd4562c6e79d5b69cdb966eed55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"979b8daebb65d3501c3a605a39f190ca7448a6e363da1212d0a1c700eb9fb40c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/979b8daebb65d3501c3a605a39f190ca7448a6e363da1212d0a1c700eb9fb40c"} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"979b8daebb65d3501c3a605a39f190ca7448a6e363da1212d0a1c700eb9fb40c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["979b8daebb65d3501c3a605a39f190ca7448a6e363da1212d0a1c700eb9fb40c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"979b8daebb65d3501c3a605a39f190ca7448a6e363da1212d0a1c700eb9fb40c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"979b8daebb65d3501c3a605a39f190ca7448a6e363da1212d0a1c700eb9fb40c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe"} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81255781f668990d65fd4ccf9e0dcb7d9b5cbfd4562c6e79d5b69cdb966eed55"} {"level":"info","ts":"2026-07-14T08:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/979b8daebb65d3501c3a605a39f190ca7448a6e363da1212d0a1c700eb9fb40c"} {"level":"debug","ts":"2026-07-14T08:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9b399561470eb3aafa275cb54c70442b17a631d5e173ba8771e7f1588bf4cf9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9b399561470eb3aafa275cb54c70442b17a631d5e173ba8771e7f1588bf4cf9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9b399561470eb3aafa275cb54c70442b17a631d5e173ba8771e7f1588bf4cf9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9b399561470eb3aafa275cb54c70442b17a631d5e173ba8771e7f1588bf4cf9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9b399561470eb3aafa275cb54c70442b17a631d5e173ba8771e7f1588bf4cf9"} {"level":"debug","ts":"2026-07-14T08:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9b399561470eb3aafa275cb54c70442b17a631d5e173ba8771e7f1588bf4cf9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9b399561470eb3aafa275cb54c70442b17a631d5e173ba8771e7f1588bf4cf9"} {"level":"debug","ts":"2026-07-14T08:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9b399561470eb3aafa275cb54c70442b17a631d5e173ba8771e7f1588bf4cf9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9b399561470eb3aafa275cb54c70442b17a631d5e173ba8771e7f1588bf4cf9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9b399561470eb3aafa275cb54c70442b17a631d5e173ba8771e7f1588bf4cf9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9b399561470eb3aafa275cb54c70442b17a631d5e173ba8771e7f1588bf4cf9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9b399561470eb3aafa275cb54c70442b17a631d5e173ba8771e7f1588bf4cf9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9b399561470eb3aafa275cb54c70442b17a631d5e173ba8771e7f1588bf4cf9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9b399561470eb3aafa275cb54c70442b17a631d5e173ba8771e7f1588bf4cf9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9b399561470eb3aafa275cb54c70442b17a631d5e173ba8771e7f1588bf4cf9"} {"level":"debug","ts":"2026-07-14T08:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9b399561470eb3aafa275cb54c70442b17a631d5e173ba8771e7f1588bf4cf9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9b399561470eb3aafa275cb54c70442b17a631d5e173ba8771e7f1588bf4cf9"} {"level":"debug","ts":"2026-07-14T08:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9b399561470eb3aafa275cb54c70442b17a631d5e173ba8771e7f1588bf4cf9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9b399561470eb3aafa275cb54c70442b17a631d5e173ba8771e7f1588bf4cf9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9b399561470eb3aafa275cb54c70442b17a631d5e173ba8771e7f1588bf4cf9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9b399561470eb3aafa275cb54c70442b17a631d5e173ba8771e7f1588bf4cf9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9b399561470eb3aafa275cb54c70442b17a631d5e173ba8771e7f1588bf4cf9"} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bed8f0d6794e29902b36566d40da92e49a9b5c621fd470d6ac16b43e7889ba6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bed8f0d6794e29902b36566d40da92e49a9b5c621fd470d6ac16b43e7889ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bed8f0d6794e29902b36566d40da92e49a9b5c621fd470d6ac16b43e7889ba6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bed8f0d6794e29902b36566d40da92e49a9b5c621fd470d6ac16b43e7889ba6"} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bed8f0d6794e29902b36566d40da92e49a9b5c621fd470d6ac16b43e7889ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bed8f0d6794e29902b36566d40da92e49a9b5c621fd470d6ac16b43e7889ba6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7bed8f0d6794e29902b36566d40da92e49a9b5c621fd470d6ac16b43e7889ba6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7bed8f0d6794e29902b36566d40da92e49a9b5c621fd470d6ac16b43e7889ba6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bed8f0d6794e29902b36566d40da92e49a9b5c621fd470d6ac16b43e7889ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bed8f0d6794e29902b36566d40da92e49a9b5c621fd470d6ac16b43e7889ba6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bed8f0d6794e29902b36566d40da92e49a9b5c621fd470d6ac16b43e7889ba6"} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bed8f0d6794e29902b36566d40da92e49a9b5c621fd470d6ac16b43e7889ba6"} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36c70d93efae14d85a08ac4fd3ea85ed809afa9ab5ba84848ac1060ec1d14cc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36c70d93efae14d85a08ac4fd3ea85ed809afa9ab5ba84848ac1060ec1d14cc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36c70d93efae14d85a08ac4fd3ea85ed809afa9ab5ba84848ac1060ec1d14cc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36c70d93efae14d85a08ac4fd3ea85ed809afa9ab5ba84848ac1060ec1d14cc5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36c70d93efae14d85a08ac4fd3ea85ed809afa9ab5ba84848ac1060ec1d14cc5"} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bed8f0d6794e29902b36566d40da92e49a9b5c621fd470d6ac16b43e7889ba6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bed8f0d6794e29902b36566d40da92e49a9b5c621fd470d6ac16b43e7889ba6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bed8f0d6794e29902b36566d40da92e49a9b5c621fd470d6ac16b43e7889ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36c70d93efae14d85a08ac4fd3ea85ed809afa9ab5ba84848ac1060ec1d14cc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bed8f0d6794e29902b36566d40da92e49a9b5c621fd470d6ac16b43e7889ba6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36c70d93efae14d85a08ac4fd3ea85ed809afa9ab5ba84848ac1060ec1d14cc5"} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bed8f0d6794e29902b36566d40da92e49a9b5c621fd470d6ac16b43e7889ba6"} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36c70d93efae14d85a08ac4fd3ea85ed809afa9ab5ba84848ac1060ec1d14cc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36c70d93efae14d85a08ac4fd3ea85ed809afa9ab5ba84848ac1060ec1d14cc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36c70d93efae14d85a08ac4fd3ea85ed809afa9ab5ba84848ac1060ec1d14cc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c18c826ffd7886328ae0cfc95adb98eb55f0e7631ed255948a1a2202aa34cde3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c18c826ffd7886328ae0cfc95adb98eb55f0e7631ed255948a1a2202aa34cde3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36c70d93efae14d85a08ac4fd3ea85ed809afa9ab5ba84848ac1060ec1d14cc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c18c826ffd7886328ae0cfc95adb98eb55f0e7631ed255948a1a2202aa34cde3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c18c826ffd7886328ae0cfc95adb98eb55f0e7631ed255948a1a2202aa34cde3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c18c826ffd7886328ae0cfc95adb98eb55f0e7631ed255948a1a2202aa34cde3"} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c18c826ffd7886328ae0cfc95adb98eb55f0e7631ed255948a1a2202aa34cde3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c18c826ffd7886328ae0cfc95adb98eb55f0e7631ed255948a1a2202aa34cde3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c18c826ffd7886328ae0cfc95adb98eb55f0e7631ed255948a1a2202aa34cde3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36c70d93efae14d85a08ac4fd3ea85ed809afa9ab5ba84848ac1060ec1d14cc5"} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c18c826ffd7886328ae0cfc95adb98eb55f0e7631ed255948a1a2202aa34cde3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c18c826ffd7886328ae0cfc95adb98eb55f0e7631ed255948a1a2202aa34cde3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c18c826ffd7886328ae0cfc95adb98eb55f0e7631ed255948a1a2202aa34cde3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c18c826ffd7886328ae0cfc95adb98eb55f0e7631ed255948a1a2202aa34cde3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c18c826ffd7886328ae0cfc95adb98eb55f0e7631ed255948a1a2202aa34cde3"} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c18c826ffd7886328ae0cfc95adb98eb55f0e7631ed255948a1a2202aa34cde3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0378964560ff0333c6da3b32e98ed6d5c852679b1fb19ef033e2e2401f4a22a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0378964560ff0333c6da3b32e98ed6d5c852679b1fb19ef033e2e2401f4a22a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0378964560ff0333c6da3b32e98ed6d5c852679b1fb19ef033e2e2401f4a22a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c18c826ffd7886328ae0cfc95adb98eb55f0e7631ed255948a1a2202aa34cde3"} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0378964560ff0333c6da3b32e98ed6d5c852679b1fb19ef033e2e2401f4a22a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0378964560ff0333c6da3b32e98ed6d5c852679b1fb19ef033e2e2401f4a22a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0378964560ff0333c6da3b32e98ed6d5c852679b1fb19ef033e2e2401f4a22a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c18c826ffd7886328ae0cfc95adb98eb55f0e7631ed255948a1a2202aa34cde3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c18c826ffd7886328ae0cfc95adb98eb55f0e7631ed255948a1a2202aa34cde3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0378964560ff0333c6da3b32e98ed6d5c852679b1fb19ef033e2e2401f4a22a"} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c18c826ffd7886328ae0cfc95adb98eb55f0e7631ed255948a1a2202aa34cde3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0378964560ff0333c6da3b32e98ed6d5c852679b1fb19ef033e2e2401f4a22a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c18c826ffd7886328ae0cfc95adb98eb55f0e7631ed255948a1a2202aa34cde3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0378964560ff0333c6da3b32e98ed6d5c852679b1fb19ef033e2e2401f4a22a"} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"043bd39c5f44d931620740c0fe8b6384b8e475635d3ab4ea1dae6c707b545e5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c18c826ffd7886328ae0cfc95adb98eb55f0e7631ed255948a1a2202aa34cde3"} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"043bd39c5f44d931620740c0fe8b6384b8e475635d3ab4ea1dae6c707b545e5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"043bd39c5f44d931620740c0fe8b6384b8e475635d3ab4ea1dae6c707b545e5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"043bd39c5f44d931620740c0fe8b6384b8e475635d3ab4ea1dae6c707b545e5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0378964560ff0333c6da3b32e98ed6d5c852679b1fb19ef033e2e2401f4a22a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0378964560ff0333c6da3b32e98ed6d5c852679b1fb19ef033e2e2401f4a22a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/043bd39c5f44d931620740c0fe8b6384b8e475635d3ab4ea1dae6c707b545e5c"} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0378964560ff0333c6da3b32e98ed6d5c852679b1fb19ef033e2e2401f4a22a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"043bd39c5f44d931620740c0fe8b6384b8e475635d3ab4ea1dae6c707b545e5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0378964560ff0333c6da3b32e98ed6d5c852679b1fb19ef033e2e2401f4a22a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"043bd39c5f44d931620740c0fe8b6384b8e475635d3ab4ea1dae6c707b545e5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef40789e28ad19f85cb4f1544166fe002f9056600888b1c354fd534277bae117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/043bd39c5f44d931620740c0fe8b6384b8e475635d3ab4ea1dae6c707b545e5c"} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef40789e28ad19f85cb4f1544166fe002f9056600888b1c354fd534277bae117","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef40789e28ad19f85cb4f1544166fe002f9056600888b1c354fd534277bae117","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"043bd39c5f44d931620740c0fe8b6384b8e475635d3ab4ea1dae6c707b545e5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["043bd39c5f44d931620740c0fe8b6384b8e475635d3ab4ea1dae6c707b545e5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0378964560ff0333c6da3b32e98ed6d5c852679b1fb19ef033e2e2401f4a22a"} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"043bd39c5f44d931620740c0fe8b6384b8e475635d3ab4ea1dae6c707b545e5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef40789e28ad19f85cb4f1544166fe002f9056600888b1c354fd534277bae117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef40789e28ad19f85cb4f1544166fe002f9056600888b1c354fd534277bae117","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"043bd39c5f44d931620740c0fe8b6384b8e475635d3ab4ea1dae6c707b545e5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef40789e28ad19f85cb4f1544166fe002f9056600888b1c354fd534277bae117","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef40789e28ad19f85cb4f1544166fe002f9056600888b1c354fd534277bae117"} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef40789e28ad19f85cb4f1544166fe002f9056600888b1c354fd534277bae117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef40789e28ad19f85cb4f1544166fe002f9056600888b1c354fd534277bae117"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/043bd39c5f44d931620740c0fe8b6384b8e475635d3ab4ea1dae6c707b545e5c"} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef40789e28ad19f85cb4f1544166fe002f9056600888b1c354fd534277bae117","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef40789e28ad19f85cb4f1544166fe002f9056600888b1c354fd534277bae117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef40789e28ad19f85cb4f1544166fe002f9056600888b1c354fd534277bae117"} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef40789e28ad19f85cb4f1544166fe002f9056600888b1c354fd534277bae117","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43533c2d9e4f93c1ea014ece0b61b53210ce2d27bb1e22b3dfbf963d8902ce37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43533c2d9e4f93c1ea014ece0b61b53210ce2d27bb1e22b3dfbf963d8902ce37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef40789e28ad19f85cb4f1544166fe002f9056600888b1c354fd534277bae117","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53be2cb11cca6fd2d7d04339911d28e690f11703a7acf6c183bcda528553969a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef40789e28ad19f85cb4f1544166fe002f9056600888b1c354fd534277bae117"} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53be2cb11cca6fd2d7d04339911d28e690f11703a7acf6c183bcda528553969a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43533c2d9e4f93c1ea014ece0b61b53210ce2d27bb1e22b3dfbf963d8902ce37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43533c2d9e4f93c1ea014ece0b61b53210ce2d27bb1e22b3dfbf963d8902ce37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef40789e28ad19f85cb4f1544166fe002f9056600888b1c354fd534277bae117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef40789e28ad19f85cb4f1544166fe002f9056600888b1c354fd534277bae117"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43533c2d9e4f93c1ea014ece0b61b53210ce2d27bb1e22b3dfbf963d8902ce37"} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef40789e28ad19f85cb4f1544166fe002f9056600888b1c354fd534277bae117","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53be2cb11cca6fd2d7d04339911d28e690f11703a7acf6c183bcda528553969a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53be2cb11cca6fd2d7d04339911d28e690f11703a7acf6c183bcda528553969a"} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53be2cb11cca6fd2d7d04339911d28e690f11703a7acf6c183bcda528553969a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43533c2d9e4f93c1ea014ece0b61b53210ce2d27bb1e22b3dfbf963d8902ce37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43533c2d9e4f93c1ea014ece0b61b53210ce2d27bb1e22b3dfbf963d8902ce37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43533c2d9e4f93c1ea014ece0b61b53210ce2d27bb1e22b3dfbf963d8902ce37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef40789e28ad19f85cb4f1544166fe002f9056600888b1c354fd534277bae117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef40789e28ad19f85cb4f1544166fe002f9056600888b1c354fd534277bae117"} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef40789e28ad19f85cb4f1544166fe002f9056600888b1c354fd534277bae117","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53be2cb11cca6fd2d7d04339911d28e690f11703a7acf6c183bcda528553969a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53be2cb11cca6fd2d7d04339911d28e690f11703a7acf6c183bcda528553969a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53be2cb11cca6fd2d7d04339911d28e690f11703a7acf6c183bcda528553969a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43533c2d9e4f93c1ea014ece0b61b53210ce2d27bb1e22b3dfbf963d8902ce37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43533c2d9e4f93c1ea014ece0b61b53210ce2d27bb1e22b3dfbf963d8902ce37"} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43533c2d9e4f93c1ea014ece0b61b53210ce2d27bb1e22b3dfbf963d8902ce37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef40789e28ad19f85cb4f1544166fe002f9056600888b1c354fd534277bae117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef40789e28ad19f85cb4f1544166fe002f9056600888b1c354fd534277bae117"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef40789e28ad19f85cb4f1544166fe002f9056600888b1c354fd534277bae117","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53be2cb11cca6fd2d7d04339911d28e690f11703a7acf6c183bcda528553969a"} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4d8800f5461629f293ac9ddcf8841b836aa63bf9f9bcc8c1be142579efd7a1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4d8800f5461629f293ac9ddcf8841b836aa63bf9f9bcc8c1be142579efd7a1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53be2cb11cca6fd2d7d04339911d28e690f11703a7acf6c183bcda528553969a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43533c2d9e4f93c1ea014ece0b61b53210ce2d27bb1e22b3dfbf963d8902ce37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43533c2d9e4f93c1ea014ece0b61b53210ce2d27bb1e22b3dfbf963d8902ce37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef40789e28ad19f85cb4f1544166fe002f9056600888b1c354fd534277bae117"} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43533c2d9e4f93c1ea014ece0b61b53210ce2d27bb1e22b3dfbf963d8902ce37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef40789e28ad19f85cb4f1544166fe002f9056600888b1c354fd534277bae117","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4d8800f5461629f293ac9ddcf8841b836aa63bf9f9bcc8c1be142579efd7a1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4d8800f5461629f293ac9ddcf8841b836aa63bf9f9bcc8c1be142579efd7a1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43533c2d9e4f93c1ea014ece0b61b53210ce2d27bb1e22b3dfbf963d8902ce37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4d8800f5461629f293ac9ddcf8841b836aa63bf9f9bcc8c1be142579efd7a1e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4d8800f5461629f293ac9ddcf8841b836aa63bf9f9bcc8c1be142579efd7a1e"} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4d8800f5461629f293ac9ddcf8841b836aa63bf9f9bcc8c1be142579efd7a1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4d8800f5461629f293ac9ddcf8841b836aa63bf9f9bcc8c1be142579efd7a1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4d8800f5461629f293ac9ddcf8841b836aa63bf9f9bcc8c1be142579efd7a1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4d8800f5461629f293ac9ddcf8841b836aa63bf9f9bcc8c1be142579efd7a1e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43533c2d9e4f93c1ea014ece0b61b53210ce2d27bb1e22b3dfbf963d8902ce37"} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef40789e28ad19f85cb4f1544166fe002f9056600888b1c354fd534277bae117"} {"level":"info","ts":"2026-07-14T08:30:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4d8800f5461629f293ac9ddcf8841b836aa63bf9f9bcc8c1be142579efd7a1e"} {"level":"debug","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"} {"level":"debug","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"} {"level":"debug","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98"} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98"} {"level":"error","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98"} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"} {"level":"error","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98"} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98"} {"level":"error","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98"} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98"} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:30:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98"} {"level":"info","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"219f8a86-4c9c-4ad2-9afc-b41b64d12632","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39144","PortSpecifier":{"PortValue":39144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"219f8a86-4c9c-4ad2-9afc-b41b64d12632","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"219f8a86-4c9c-4ad2-9afc-b41b64d12632","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39144","PortSpecifier":{"PortValue":39144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784017854,"nanos":589143224},"http":{"id":"219f8a86-4c9c-4ad2-9afc-b41b64d12632","method":"POST","headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"219f8a86-4c9c-4ad2-9afc-b41b64d12632","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"219f8a86-4c9c-4ad2-9afc-b41b64d12632","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"]}} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"219f8a86-4c9c-4ad2-9afc-b41b64d12632","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0352dfd7793bb10611cbb5728d974f362364b047008f8c740877d1e3472cdd17"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"219f8a86-4c9c-4ad2-9afc-b41b64d12632","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"219f8a86-4c9c-4ad2-9afc-b41b64d12632","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"219f8a86-4c9c-4ad2-9afc-b41b64d12632","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0324b2/auth-test-model-0324b2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"219f8a86-4c9c-4ad2-9afc-b41b64d12632","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"219f8a86-4c9c-4ad2-9afc-b41b64d12632","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"219f8a86-4c9c-4ad2-9afc-b41b64d12632","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"219f8a86-4c9c-4ad2-9afc-b41b64d12632","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"219f8a86-4c9c-4ad2-9afc-b41b64d12632","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a089d6e7-1a91-434b-846b-5852458a6809","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38222","PortSpecifier":{"PortValue":38222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a089d6e7-1a91-434b-846b-5852458a6809","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a089d6e7-1a91-434b-846b-5852458a6809","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38222","PortSpecifier":{"PortValue":38222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784017854,"nanos":637991852},"http":{"id":"a089d6e7-1a91-434b-846b-5852458a6809","method":"POST","headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a089d6e7-1a91-434b-846b-5852458a6809","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a089d6e7-1a91-434b-846b-5852458a6809","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"]}} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a089d6e7-1a91-434b-846b-5852458a6809","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a089d6e7-1a91-434b-846b-5852458a6809","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a089d6e7-1a91-434b-846b-5852458a6809","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b9c837/auth-test-model-b9c837\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a089d6e7-1a91-434b-846b-5852458a6809","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a089d6e7-1a91-434b-846b-5852458a6809","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a089d6e7-1a91-434b-846b-5852458a6809","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a089d6e7-1a91-434b-846b-5852458a6809","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a089d6e7-1a91-434b-846b-5852458a6809","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a089d6e7-1a91-434b-846b-5852458a6809","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df0dab10-786d-4254-acbf-f671c7100d0d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39156","PortSpecifier":{"PortValue":39156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"df0dab10-786d-4254-acbf-f671c7100d0d","method":"GET","path":"/maas-api/v1/api-keys/a9d9532f-777e-48f9-92a6-4b886b91d86b","host":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df0dab10-786d-4254-acbf-f671c7100d0d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39156","PortSpecifier":{"PortValue":39156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784017854,"nanos":692476383},"http":{"id":"df0dab10-786d-4254-acbf-f671c7100d0d","method":"GET","headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a9d9532f-777e-48f9-92a6-4b886b91d86b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"df0dab10-786d-4254-acbf-f671c7100d0d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"df0dab10-786d-4254-acbf-f671c7100d0d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"]}} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"df0dab10-786d-4254-acbf-f671c7100d0d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0352dfd7793bb10611cbb5728d974f362364b047008f8c740877d1e3472cdd17"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a9d9532f-777e-48f9-92a6-4b886b91d86b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df0dab10-786d-4254-acbf-f671c7100d0d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df0dab10-786d-4254-acbf-f671c7100d0d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df0dab10-786d-4254-acbf-f671c7100d0d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0324b2/auth-test-model-0324b2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"df0dab10-786d-4254-acbf-f671c7100d0d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df0dab10-786d-4254-acbf-f671c7100d0d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df0dab10-786d-4254-acbf-f671c7100d0d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df0dab10-786d-4254-acbf-f671c7100d0d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df0dab10-786d-4254-acbf-f671c7100d0d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d674af0-f262-441a-9e7d-718d674edd86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38224","PortSpecifier":{"PortValue":38224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d674af0-f262-441a-9e7d-718d674edd86","method":"GET","path":"/maas-api/v1/api-keys/3789097a-6338-4250-b9ae-bd7a749e7c4b","host":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d674af0-f262-441a-9e7d-718d674edd86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38224","PortSpecifier":{"PortValue":38224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784017854,"nanos":733518373},"http":{"id":"3d674af0-f262-441a-9e7d-718d674edd86","method":"GET","headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3789097a-6338-4250-b9ae-bd7a749e7c4b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3d674af0-f262-441a-9e7d-718d674edd86","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d674af0-f262-441a-9e7d-718d674edd86","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"]}} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d674af0-f262-441a-9e7d-718d674edd86","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3789097a-6338-4250-b9ae-bd7a749e7c4b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d674af0-f262-441a-9e7d-718d674edd86","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d674af0-f262-441a-9e7d-718d674edd86","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d674af0-f262-441a-9e7d-718d674edd86","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b9c837/auth-test-model-b9c837\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3d674af0-f262-441a-9e7d-718d674edd86","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d674af0-f262-441a-9e7d-718d674edd86","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d674af0-f262-441a-9e7d-718d674edd86","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d674af0-f262-441a-9e7d-718d674edd86","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d674af0-f262-441a-9e7d-718d674edd86","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:31:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9983310e-e951-47d2-a2de-9131b0653d39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51066","PortSpecifier":{"PortValue":51066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9983310e-e951-47d2-a2de-9131b0653d39","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:31:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9983310e-e951-47d2-a2de-9131b0653d39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51066","PortSpecifier":{"PortValue":51066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784017871,"nanos":929964228},"http":{"id":"9983310e-e951-47d2-a2de-9131b0653d39","method":"POST","headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:31:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9983310e-e951-47d2-a2de-9131b0653d39","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T08:31:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9983310e-e951-47d2-a2de-9131b0653d39","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"]}} {"level":"debug","ts":"2026-07-14T08:31:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9983310e-e951-47d2-a2de-9131b0653d39","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0352dfd7793bb10611cbb5728d974f362364b047008f8c740877d1e3472cdd17"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:31:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9983310e-e951-47d2-a2de-9131b0653d39","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:31:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9983310e-e951-47d2-a2de-9131b0653d39","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:31:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9983310e-e951-47d2-a2de-9131b0653d39","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0324b2/auth-test-model-0324b2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:31:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9983310e-e951-47d2-a2de-9131b0653d39","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T08:31:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9983310e-e951-47d2-a2de-9131b0653d39","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T08:31:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9983310e-e951-47d2-a2de-9131b0653d39","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T08:31:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9983310e-e951-47d2-a2de-9131b0653d39","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:31:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9983310e-e951-47d2-a2de-9131b0653d39","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:31:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea747958-5b68-455b-8ad0-f43b892c9beb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38794","PortSpecifier":{"PortValue":38794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ea747958-5b68-455b-8ad0-f43b892c9beb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:31:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea747958-5b68-455b-8ad0-f43b892c9beb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38794","PortSpecifier":{"PortValue":38794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784017871,"nanos":968284880},"http":{"id":"ea747958-5b68-455b-8ad0-f43b892c9beb","method":"POST","headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:31:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ea747958-5b68-455b-8ad0-f43b892c9beb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T08:31:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ea747958-5b68-455b-8ad0-f43b892c9beb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"]}} {"level":"debug","ts":"2026-07-14T08:31:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ea747958-5b68-455b-8ad0-f43b892c9beb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:31:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea747958-5b68-455b-8ad0-f43b892c9beb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:31:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea747958-5b68-455b-8ad0-f43b892c9beb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:31:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea747958-5b68-455b-8ad0-f43b892c9beb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b9c837/auth-test-model-b9c837\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:31:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ea747958-5b68-455b-8ad0-f43b892c9beb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T08:31:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea747958-5b68-455b-8ad0-f43b892c9beb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T08:31:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea747958-5b68-455b-8ad0-f43b892c9beb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T08:31:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea747958-5b68-455b-8ad0-f43b892c9beb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:31:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea747958-5b68-455b-8ad0-f43b892c9beb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:31:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1615eaf-6f85-436d-b1cc-57ba519222d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51078","PortSpecifier":{"PortValue":51078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d1615eaf-6f85-436d-b1cc-57ba519222d3","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:31:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1615eaf-6f85-436d-b1cc-57ba519222d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51078","PortSpecifier":{"PortValue":51078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784017872,"nanos":2781726},"http":{"id":"d1615eaf-6f85-436d-b1cc-57ba519222d3","method":"GET","headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:31:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d1615eaf-6f85-436d-b1cc-57ba519222d3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-I29bHXPk2yijZ6kb_FZwDfjdtOYX7yFWGJVKGmHeomN3diUHHG4hJA314zB0"} {"level":"debug","ts":"2026-07-14T08:31:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d1615eaf-6f85-436d-b1cc-57ba519222d3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-I29bHXPk2yijZ6kb_FZwDfjdtOYX7yFWGJVKGmHeomN3diUHHG4hJA314zB0\"}"} {"level":"debug","ts":"2026-07-14T08:31:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d1615eaf-6f85-436d-b1cc-57ba519222d3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a59b1b4c-6f67-46ca-97dd-3d2f56443b64","keyName":"e2e-auth-iso-a-8dbae9","subscription":"e2e-auth-iso-01187c","tenant":"e2e-shared-a-0324b2","userId":"a59b1b4c-6f67-46ca-97dd-3d2f56443b64","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T08:31:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d1615eaf-6f85-436d-b1cc-57ba519222d3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:31:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1615eaf-6f85-436d-b1cc-57ba519222d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:31:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1615eaf-6f85-436d-b1cc-57ba519222d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:31:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1615eaf-6f85-436d-b1cc-57ba519222d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0324b2/auth-test-model-0324b2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:31:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1615eaf-6f85-436d-b1cc-57ba519222d3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T08:31:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d1615eaf-6f85-436d-b1cc-57ba519222d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T08:31:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1615eaf-6f85-436d-b1cc-57ba519222d3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-01187c"} {"level":"debug","ts":"2026-07-14T08:31:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1615eaf-6f85-436d-b1cc-57ba519222d3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T08:31:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1615eaf-6f85-436d-b1cc-57ba519222d3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:31:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1615eaf-6f85-436d-b1cc-57ba519222d3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fea5017-7a33-42d7-b6cd-322c29578876","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59150","PortSpecifier":{"PortValue":59150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2fea5017-7a33-42d7-b6cd-322c29578876","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fea5017-7a33-42d7-b6cd-322c29578876","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59150","PortSpecifier":{"PortValue":59150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784017889,"nanos":162828753},"http":{"id":"2fea5017-7a33-42d7-b6cd-322c29578876","method":"POST","headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2fea5017-7a33-42d7-b6cd-322c29578876","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2fea5017-7a33-42d7-b6cd-322c29578876","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"]}} {"level":"debug","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2fea5017-7a33-42d7-b6cd-322c29578876","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0352dfd7793bb10611cbb5728d974f362364b047008f8c740877d1e3472cdd17"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fea5017-7a33-42d7-b6cd-322c29578876","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fea5017-7a33-42d7-b6cd-322c29578876","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fea5017-7a33-42d7-b6cd-322c29578876","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0324b2/auth-test-model-0324b2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2fea5017-7a33-42d7-b6cd-322c29578876","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fea5017-7a33-42d7-b6cd-322c29578876","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fea5017-7a33-42d7-b6cd-322c29578876","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fea5017-7a33-42d7-b6cd-322c29578876","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fea5017-7a33-42d7-b6cd-322c29578876","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f0cc092-b288-4ea9-9fa4-aa2618fce614","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48116","PortSpecifier":{"PortValue":48116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f0cc092-b288-4ea9-9fa4-aa2618fce614","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f0cc092-b288-4ea9-9fa4-aa2618fce614","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48116","PortSpecifier":{"PortValue":48116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784017889,"nanos":194928412},"http":{"id":"1f0cc092-b288-4ea9-9fa4-aa2618fce614","method":"POST","headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1f0cc092-b288-4ea9-9fa4-aa2618fce614","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f0cc092-b288-4ea9-9fa4-aa2618fce614","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"]}} {"level":"debug","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f0cc092-b288-4ea9-9fa4-aa2618fce614","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f0cc092-b288-4ea9-9fa4-aa2618fce614","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f0cc092-b288-4ea9-9fa4-aa2618fce614","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f0cc092-b288-4ea9-9fa4-aa2618fce614","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b9c837/auth-test-model-b9c837\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1f0cc092-b288-4ea9-9fa4-aa2618fce614","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f0cc092-b288-4ea9-9fa4-aa2618fce614","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f0cc092-b288-4ea9-9fa4-aa2618fce614","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f0cc092-b288-4ea9-9fa4-aa2618fce614","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f0cc092-b288-4ea9-9fa4-aa2618fce614","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1dfcd2d6-2d56-493f-9512-830d55a004ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48124","PortSpecifier":{"PortValue":48124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1dfcd2d6-2d56-493f-9512-830d55a004ac","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1dfcd2d6-2d56-493f-9512-830d55a004ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48124","PortSpecifier":{"PortValue":48124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784017889,"nanos":234031594},"http":{"id":"1dfcd2d6-2d56-493f-9512-830d55a004ac","method":"GET","headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1dfcd2d6-2d56-493f-9512-830d55a004ac","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-mTD18YcIGBYOv9JA_InYAn8kx6bA6zr1y9I4fHeNGGrrPRwSSK6E7zhNi2AY"} {"level":"debug","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1dfcd2d6-2d56-493f-9512-830d55a004ac","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b9c837.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-mTD18YcIGBYOv9JA_InYAn8kx6bA6zr1y9I4fHeNGGrrPRwSSK6E7zhNi2AY\"}"} {"level":"debug","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1dfcd2d6-2d56-493f-9512-830d55a004ac","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b9c837.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1dfcd2d6-2d56-493f-9512-830d55a004ac","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1dfcd2d6-2d56-493f-9512-830d55a004ac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"1dfcd2d6-2d56-493f-9512-830d55a004ac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1dfcd2d6-2d56-493f-9512-830d55a004ac","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-14T08:31:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1dfcd2d6-2d56-493f-9512-830d55a004ac","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44136e3b-d1c5-44a5-9abd-04196b4bce8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43346","PortSpecifier":{"PortValue":43346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"44136e3b-d1c5-44a5-9abd-04196b4bce8d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44136e3b-d1c5-44a5-9abd-04196b4bce8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43346","PortSpecifier":{"PortValue":43346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784017906,"nanos":415043381},"http":{"id":"44136e3b-d1c5-44a5-9abd-04196b4bce8d","method":"POST","headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"44136e3b-d1c5-44a5-9abd-04196b4bce8d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"44136e3b-d1c5-44a5-9abd-04196b4bce8d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"]}} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"44136e3b-d1c5-44a5-9abd-04196b4bce8d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0352dfd7793bb10611cbb5728d974f362364b047008f8c740877d1e3472cdd17"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44136e3b-d1c5-44a5-9abd-04196b4bce8d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44136e3b-d1c5-44a5-9abd-04196b4bce8d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44136e3b-d1c5-44a5-9abd-04196b4bce8d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0324b2/auth-test-model-0324b2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"44136e3b-d1c5-44a5-9abd-04196b4bce8d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44136e3b-d1c5-44a5-9abd-04196b4bce8d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44136e3b-d1c5-44a5-9abd-04196b4bce8d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44136e3b-d1c5-44a5-9abd-04196b4bce8d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44136e3b-d1c5-44a5-9abd-04196b4bce8d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9ac8fd3-7bf4-4559-b01b-c4d90ba541f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59368","PortSpecifier":{"PortValue":59368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e9ac8fd3-7bf4-4559-b01b-c4d90ba541f1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9ac8fd3-7bf4-4559-b01b-c4d90ba541f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59368","PortSpecifier":{"PortValue":59368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784017906,"nanos":453423851},"http":{"id":"e9ac8fd3-7bf4-4559-b01b-c4d90ba541f1","method":"POST","headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e9ac8fd3-7bf4-4559-b01b-c4d90ba541f1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e9ac8fd3-7bf4-4559-b01b-c4d90ba541f1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"]}} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e9ac8fd3-7bf4-4559-b01b-c4d90ba541f1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9ac8fd3-7bf4-4559-b01b-c4d90ba541f1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9ac8fd3-7bf4-4559-b01b-c4d90ba541f1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9ac8fd3-7bf4-4559-b01b-c4d90ba541f1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b9c837/auth-test-model-b9c837\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e9ac8fd3-7bf4-4559-b01b-c4d90ba541f1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9ac8fd3-7bf4-4559-b01b-c4d90ba541f1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9ac8fd3-7bf4-4559-b01b-c4d90ba541f1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9ac8fd3-7bf4-4559-b01b-c4d90ba541f1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9ac8fd3-7bf4-4559-b01b-c4d90ba541f1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9d549be-ade9-475d-9b86-f0cd3130223e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43348","PortSpecifier":{"PortValue":43348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e9d549be-ade9-475d-9b86-f0cd3130223e","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9d549be-ade9-475d-9b86-f0cd3130223e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43348","PortSpecifier":{"PortValue":43348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784017906,"nanos":484524185},"http":{"id":"e9d549be-ade9-475d-9b86-f0cd3130223e","method":"POST","headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e9d549be-ade9-475d-9b86-f0cd3130223e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e9d549be-ade9-475d-9b86-f0cd3130223e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"]}} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e9d549be-ade9-475d-9b86-f0cd3130223e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0352dfd7793bb10611cbb5728d974f362364b047008f8c740877d1e3472cdd17"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9d549be-ade9-475d-9b86-f0cd3130223e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9d549be-ade9-475d-9b86-f0cd3130223e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9d549be-ade9-475d-9b86-f0cd3130223e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0324b2/auth-test-model-0324b2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e9d549be-ade9-475d-9b86-f0cd3130223e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9d549be-ade9-475d-9b86-f0cd3130223e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9d549be-ade9-475d-9b86-f0cd3130223e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9d549be-ade9-475d-9b86-f0cd3130223e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9d549be-ade9-475d-9b86-f0cd3130223e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"adc0dd1e-1553-4084-aa11-5df47c6da6eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59380","PortSpecifier":{"PortValue":59380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"adc0dd1e-1553-4084-aa11-5df47c6da6eb","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"adc0dd1e-1553-4084-aa11-5df47c6da6eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59380","PortSpecifier":{"PortValue":59380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784017906,"nanos":515855440},"http":{"id":"adc0dd1e-1553-4084-aa11-5df47c6da6eb","method":"POST","headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"adc0dd1e-1553-4084-aa11-5df47c6da6eb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"adc0dd1e-1553-4084-aa11-5df47c6da6eb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"]}} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"adc0dd1e-1553-4084-aa11-5df47c6da6eb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adc0dd1e-1553-4084-aa11-5df47c6da6eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adc0dd1e-1553-4084-aa11-5df47c6da6eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adc0dd1e-1553-4084-aa11-5df47c6da6eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b9c837/auth-test-model-b9c837\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"adc0dd1e-1553-4084-aa11-5df47c6da6eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adc0dd1e-1553-4084-aa11-5df47c6da6eb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adc0dd1e-1553-4084-aa11-5df47c6da6eb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"adc0dd1e-1553-4084-aa11-5df47c6da6eb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:31:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"adc0dd1e-1553-4084-aa11-5df47c6da6eb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54967fd6-e171-4312-a2d1-2451c194fd73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33846","PortSpecifier":{"PortValue":33846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"54967fd6-e171-4312-a2d1-2451c194fd73","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54967fd6-e171-4312-a2d1-2451c194fd73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33846","PortSpecifier":{"PortValue":33846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784017925,"nanos":770167947},"http":{"id":"54967fd6-e171-4312-a2d1-2451c194fd73","method":"POST","headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"54967fd6-e171-4312-a2d1-2451c194fd73","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"54967fd6-e171-4312-a2d1-2451c194fd73","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"]}} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"54967fd6-e171-4312-a2d1-2451c194fd73","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0352dfd7793bb10611cbb5728d974f362364b047008f8c740877d1e3472cdd17"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54967fd6-e171-4312-a2d1-2451c194fd73","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54967fd6-e171-4312-a2d1-2451c194fd73","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0324b2/auth-test-model-0324b2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54967fd6-e171-4312-a2d1-2451c194fd73","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"54967fd6-e171-4312-a2d1-2451c194fd73","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54967fd6-e171-4312-a2d1-2451c194fd73","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54967fd6-e171-4312-a2d1-2451c194fd73","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54967fd6-e171-4312-a2d1-2451c194fd73","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54967fd6-e171-4312-a2d1-2451c194fd73","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee0912ac-21a5-4200-bfbd-f733628e9503","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37210","PortSpecifier":{"PortValue":37210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ee0912ac-21a5-4200-bfbd-f733628e9503","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee0912ac-21a5-4200-bfbd-f733628e9503","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37210","PortSpecifier":{"PortValue":37210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784017925,"nanos":806090751},"http":{"id":"ee0912ac-21a5-4200-bfbd-f733628e9503","method":"POST","headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ee0912ac-21a5-4200-bfbd-f733628e9503","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ee0912ac-21a5-4200-bfbd-f733628e9503","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"]}} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ee0912ac-21a5-4200-bfbd-f733628e9503","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee0912ac-21a5-4200-bfbd-f733628e9503","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee0912ac-21a5-4200-bfbd-f733628e9503","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee0912ac-21a5-4200-bfbd-f733628e9503","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b9c837/auth-test-model-b9c837\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ee0912ac-21a5-4200-bfbd-f733628e9503","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee0912ac-21a5-4200-bfbd-f733628e9503","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee0912ac-21a5-4200-bfbd-f733628e9503","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee0912ac-21a5-4200-bfbd-f733628e9503","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee0912ac-21a5-4200-bfbd-f733628e9503","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5048cef4-3301-4ab6-9a67-7fe10b604890","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37224","PortSpecifier":{"PortValue":37224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5048cef4-3301-4ab6-9a67-7fe10b604890","method":"GET","path":"/maas-api/v1/api-keys/baa3e98a-3c40-4c13-8748-70e68fc76916","host":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5048cef4-3301-4ab6-9a67-7fe10b604890","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37224","PortSpecifier":{"PortValue":37224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784017925,"nanos":841220428},"http":{"id":"5048cef4-3301-4ab6-9a67-7fe10b604890","method":"GET","headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/baa3e98a-3c40-4c13-8748-70e68fc76916",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5048cef4-3301-4ab6-9a67-7fe10b604890","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5048cef4-3301-4ab6-9a67-7fe10b604890","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"]}} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5048cef4-3301-4ab6-9a67-7fe10b604890","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/baa3e98a-3c40-4c13-8748-70e68fc76916",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5048cef4-3301-4ab6-9a67-7fe10b604890","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5048cef4-3301-4ab6-9a67-7fe10b604890","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5048cef4-3301-4ab6-9a67-7fe10b604890","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b9c837/auth-test-model-b9c837\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5048cef4-3301-4ab6-9a67-7fe10b604890","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5048cef4-3301-4ab6-9a67-7fe10b604890","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5048cef4-3301-4ab6-9a67-7fe10b604890","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5048cef4-3301-4ab6-9a67-7fe10b604890","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5048cef4-3301-4ab6-9a67-7fe10b604890","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da5345b5-d2a0-459b-8fb7-9177c62715e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33848","PortSpecifier":{"PortValue":33848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"da5345b5-d2a0-459b-8fb7-9177c62715e6","method":"GET","path":"/maas-api/v1/api-keys/baa3e98a-3c40-4c13-8748-70e68fc76916","host":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da5345b5-d2a0-459b-8fb7-9177c62715e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33848","PortSpecifier":{"PortValue":33848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784017925,"nanos":868612530},"http":{"id":"da5345b5-d2a0-459b-8fb7-9177c62715e6","method":"GET","headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/baa3e98a-3c40-4c13-8748-70e68fc76916",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"da5345b5-d2a0-459b-8fb7-9177c62715e6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"da5345b5-d2a0-459b-8fb7-9177c62715e6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"]}} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"da5345b5-d2a0-459b-8fb7-9177c62715e6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0352dfd7793bb10611cbb5728d974f362364b047008f8c740877d1e3472cdd17"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/baa3e98a-3c40-4c13-8748-70e68fc76916",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da5345b5-d2a0-459b-8fb7-9177c62715e6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da5345b5-d2a0-459b-8fb7-9177c62715e6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da5345b5-d2a0-459b-8fb7-9177c62715e6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0324b2/auth-test-model-0324b2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"da5345b5-d2a0-459b-8fb7-9177c62715e6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da5345b5-d2a0-459b-8fb7-9177c62715e6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da5345b5-d2a0-459b-8fb7-9177c62715e6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da5345b5-d2a0-459b-8fb7-9177c62715e6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:32:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da5345b5-d2a0-459b-8fb7-9177c62715e6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1809692a-2cc9-47c1-bd6d-92096a2f33ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34328","PortSpecifier":{"PortValue":34328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1809692a-2cc9-47c1-bd6d-92096a2f33ec","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1809692a-2cc9-47c1-bd6d-92096a2f33ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34328","PortSpecifier":{"PortValue":34328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784017945,"nanos":141765273},"http":{"id":"1809692a-2cc9-47c1-bd6d-92096a2f33ec","method":"POST","headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1809692a-2cc9-47c1-bd6d-92096a2f33ec","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1809692a-2cc9-47c1-bd6d-92096a2f33ec","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"]}} {"level":"debug","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1809692a-2cc9-47c1-bd6d-92096a2f33ec","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0352dfd7793bb10611cbb5728d974f362364b047008f8c740877d1e3472cdd17"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1809692a-2cc9-47c1-bd6d-92096a2f33ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1809692a-2cc9-47c1-bd6d-92096a2f33ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1809692a-2cc9-47c1-bd6d-92096a2f33ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0324b2/auth-test-model-0324b2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1809692a-2cc9-47c1-bd6d-92096a2f33ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1809692a-2cc9-47c1-bd6d-92096a2f33ec","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1809692a-2cc9-47c1-bd6d-92096a2f33ec","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1809692a-2cc9-47c1-bd6d-92096a2f33ec","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1809692a-2cc9-47c1-bd6d-92096a2f33ec","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"299c778c-550b-9c67-84e1-48c4ac4385ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36934","PortSpecifier":{"PortValue":36934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"299c778c-550b-9c67-84e1-48c4ac4385ae","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"299c778c-550b-9c67-84e1-48c4ac4385ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36934","PortSpecifier":{"PortValue":36934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784017945,"nanos":177916191},"http":{"id":"299c778c-550b-9c67-84e1-48c4ac4385ae","method":"POST","headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"299c778c-550b-9c67-84e1-48c4ac4385ae","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"299c778c-550b-9c67-84e1-48c4ac4385ae","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"]}} {"level":"debug","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"299c778c-550b-9c67-84e1-48c4ac4385ae","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"299c778c-550b-9c67-84e1-48c4ac4385ae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"299c778c-550b-9c67-84e1-48c4ac4385ae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"299c778c-550b-9c67-84e1-48c4ac4385ae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b9c837/auth-test-model-b9c837\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"299c778c-550b-9c67-84e1-48c4ac4385ae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"299c778c-550b-9c67-84e1-48c4ac4385ae","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"299c778c-550b-9c67-84e1-48c4ac4385ae","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"299c778c-550b-9c67-84e1-48c4ac4385ae","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"299c778c-550b-9c67-84e1-48c4ac4385ae","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20160fe7-c0de-4716-b1d6-3fe39a193027","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34334","PortSpecifier":{"PortValue":34334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"20160fe7-c0de-4716-b1d6-3fe39a193027","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20160fe7-c0de-4716-b1d6-3fe39a193027","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34334","PortSpecifier":{"PortValue":34334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784017945,"nanos":219601070},"http":{"id":"20160fe7-c0de-4716-b1d6-3fe39a193027","method":"POST","headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"20160fe7-c0de-4716-b1d6-3fe39a193027","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-18CJDkZ8XjCuhyK6L_QiW8nXiHJWYvjxoWhhCaYW8XlshmtQYOzsDk5hvfdJr"} {"level":"debug","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"20160fe7-c0de-4716-b1d6-3fe39a193027","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-18CJDkZ8XjCuhyK6L_QiW8nXiHJWYvjxoWhhCaYW8XlshmtQYOzsDk5hvfdJr\"}"} {"level":"debug","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"20160fe7-c0de-4716-b1d6-3fe39a193027","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c845fc4b-a9b5-4ad9-8024-04373b614fe6","keyName":"e2e-auth-iso-a-38c2ba","subscription":"e2e-auth-iso-944799","tenant":"e2e-shared-a-0324b2","userId":"c845fc4b-a9b5-4ad9-8024-04373b614fe6","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"20160fe7-c0de-4716-b1d6-3fe39a193027","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20160fe7-c0de-4716-b1d6-3fe39a193027","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20160fe7-c0de-4716-b1d6-3fe39a193027","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20160fe7-c0de-4716-b1d6-3fe39a193027","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0324b2/auth-test-model-0324b2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"20160fe7-c0de-4716-b1d6-3fe39a193027","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20160fe7-c0de-4716-b1d6-3fe39a193027","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20160fe7-c0de-4716-b1d6-3fe39a193027","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20160fe7-c0de-4716-b1d6-3fe39a193027","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-944799"} {"level":"info","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20160fe7-c0de-4716-b1d6-3fe39a193027","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:32:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20160fe7-c0de-4716-b1d6-3fe39a193027","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:32:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef40789e28ad19f85cb4f1544166fe002f9056600888b1c354fd534277bae117"} {"level":"info","ts":"2026-07-14T08:32:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4d8800f5461629f293ac9ddcf8841b836aa63bf9f9bcc8c1be142579efd7a1e"} {"level":"info","ts":"2026-07-14T08:32:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/043bd39c5f44d931620740c0fe8b6384b8e475635d3ab4ea1dae6c707b545e5c"} {"level":"info","ts":"2026-07-14T08:32:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87fbad444a47962a5e8b4b3f0a2561db8add0ed2c16ff49ea5250d86bf155d12"} {"level":"info","ts":"2026-07-14T08:32:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/979b8daebb65d3501c3a605a39f190ca7448a6e363da1212d0a1c700eb9fb40c"} {"level":"info","ts":"2026-07-14T08:32:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81255781f668990d65fd4ccf9e0dcb7d9b5cbfd4562c6e79d5b69cdb966eed55"} {"level":"info","ts":"2026-07-14T08:32:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bed8f0d6794e29902b36566d40da92e49a9b5c621fd470d6ac16b43e7889ba6"} {"level":"info","ts":"2026-07-14T08:32:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d51d170315391a6f0e17d67afddec4744d6fd1ac7ebb03c832c496766f8967a3"} {"level":"info","ts":"2026-07-14T08:32:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/617a94f26d1b38f483ccaf9f27c92752aa273f92e6ab6459856bf7201fe56d98"} {"level":"info","ts":"2026-07-14T08:32:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0378964560ff0333c6da3b32e98ed6d5c852679b1fb19ef033e2e2401f4a22a"} {"level":"info","ts":"2026-07-14T08:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c853abaf939418ac5b5187f3a0f0674d21d85b39e57ba1f88d91e7787cef3168"} {"level":"info","ts":"2026-07-14T08:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e94f0c1520cade42a181072092bd432a35e136f8ee9d9eb533e22d31ff5c4571"} {"level":"info","ts":"2026-07-14T08:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28e8c4d043ed9194f0e30666b8c414e80ac0c6eab586f4f5643e9b06ef988769"} {"level":"info","ts":"2026-07-14T08:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9b399561470eb3aafa275cb54c70442b17a631d5e173ba8771e7f1588bf4cf9"} {"level":"info","ts":"2026-07-14T08:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9bd15e66870f4b9bb370343c6fb30588acf698d8393b0c58aa9f5c9699633da2"} {"level":"info","ts":"2026-07-14T08:32:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43533c2d9e4f93c1ea014ece0b61b53210ce2d27bb1e22b3dfbf963d8902ce37"} {"level":"debug","ts":"2026-07-14T08:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60a38aab22122ea7d79705f35df0f60805fbb8e8283dacfeb38ebbbc660eb1bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60a38aab22122ea7d79705f35df0f60805fbb8e8283dacfeb38ebbbc660eb1bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a38aab22122ea7d79705f35df0f60805fbb8e8283dacfeb38ebbbc660eb1bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a38aab22122ea7d79705f35df0f60805fbb8e8283dacfeb38ebbbc660eb1bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60a38aab22122ea7d79705f35df0f60805fbb8e8283dacfeb38ebbbc660eb1bb"} {"level":"debug","ts":"2026-07-14T08:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a38aab22122ea7d79705f35df0f60805fbb8e8283dacfeb38ebbbc660eb1bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60a38aab22122ea7d79705f35df0f60805fbb8e8283dacfeb38ebbbc660eb1bb"} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60a38aab22122ea7d79705f35df0f60805fbb8e8283dacfeb38ebbbc660eb1bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60a38aab22122ea7d79705f35df0f60805fbb8e8283dacfeb38ebbbc660eb1bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60a38aab22122ea7d79705f35df0f60805fbb8e8283dacfeb38ebbbc660eb1bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60a38aab22122ea7d79705f35df0f60805fbb8e8283dacfeb38ebbbc660eb1bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60a38aab22122ea7d79705f35df0f60805fbb8e8283dacfeb38ebbbc660eb1bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a38aab22122ea7d79705f35df0f60805fbb8e8283dacfeb38ebbbc660eb1bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a38aab22122ea7d79705f35df0f60805fbb8e8283dacfeb38ebbbc660eb1bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60a38aab22122ea7d79705f35df0f60805fbb8e8283dacfeb38ebbbc660eb1bb"} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a38aab22122ea7d79705f35df0f60805fbb8e8283dacfeb38ebbbc660eb1bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60a38aab22122ea7d79705f35df0f60805fbb8e8283dacfeb38ebbbc660eb1bb"} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60a38aab22122ea7d79705f35df0f60805fbb8e8283dacfeb38ebbbc660eb1bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60a38aab22122ea7d79705f35df0f60805fbb8e8283dacfeb38ebbbc660eb1bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60a38aab22122ea7d79705f35df0f60805fbb8e8283dacfeb38ebbbc660eb1bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a38aab22122ea7d79705f35df0f60805fbb8e8283dacfeb38ebbbc660eb1bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60a38aab22122ea7d79705f35df0f60805fbb8e8283dacfeb38ebbbc660eb1bb"} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20268ab0e8b28c4cad675190e374e5f7fd66633a81d995d5a694bbbfc95d21cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20268ab0e8b28c4cad675190e374e5f7fd66633a81d995d5a694bbbfc95d21cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20268ab0e8b28c4cad675190e374e5f7fd66633a81d995d5a694bbbfc95d21cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20268ab0e8b28c4cad675190e374e5f7fd66633a81d995d5a694bbbfc95d21cb"} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20268ab0e8b28c4cad675190e374e5f7fd66633a81d995d5a694bbbfc95d21cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20268ab0e8b28c4cad675190e374e5f7fd66633a81d995d5a694bbbfc95d21cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20268ab0e8b28c4cad675190e374e5f7fd66633a81d995d5a694bbbfc95d21cb"} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20268ab0e8b28c4cad675190e374e5f7fd66633a81d995d5a694bbbfc95d21cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20268ab0e8b28c4cad675190e374e5f7fd66633a81d995d5a694bbbfc95d21cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20268ab0e8b28c4cad675190e374e5f7fd66633a81d995d5a694bbbfc95d21cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20268ab0e8b28c4cad675190e374e5f7fd66633a81d995d5a694bbbfc95d21cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20268ab0e8b28c4cad675190e374e5f7fd66633a81d995d5a694bbbfc95d21cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20268ab0e8b28c4cad675190e374e5f7fd66633a81d995d5a694bbbfc95d21cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20268ab0e8b28c4cad675190e374e5f7fd66633a81d995d5a694bbbfc95d21cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20268ab0e8b28c4cad675190e374e5f7fd66633a81d995d5a694bbbfc95d21cb"} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20268ab0e8b28c4cad675190e374e5f7fd66633a81d995d5a694bbbfc95d21cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20268ab0e8b28c4cad675190e374e5f7fd66633a81d995d5a694bbbfc95d21cb"} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20268ab0e8b28c4cad675190e374e5f7fd66633a81d995d5a694bbbfc95d21cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20268ab0e8b28c4cad675190e374e5f7fd66633a81d995d5a694bbbfc95d21cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20268ab0e8b28c4cad675190e374e5f7fd66633a81d995d5a694bbbfc95d21cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2858acb94011df79dd2bd08f818c103c8667d42b4d3a42dcdca1fde249f5c765","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2858acb94011df79dd2bd08f818c103c8667d42b4d3a42dcdca1fde249f5c765","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20268ab0e8b28c4cad675190e374e5f7fd66633a81d995d5a694bbbfc95d21cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2858acb94011df79dd2bd08f818c103c8667d42b4d3a42dcdca1fde249f5c765","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2858acb94011df79dd2bd08f818c103c8667d42b4d3a42dcdca1fde249f5c765"} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2858acb94011df79dd2bd08f818c103c8667d42b4d3a42dcdca1fde249f5c765","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2858acb94011df79dd2bd08f818c103c8667d42b4d3a42dcdca1fde249f5c765"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2858acb94011df79dd2bd08f818c103c8667d42b4d3a42dcdca1fde249f5c765","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2858acb94011df79dd2bd08f818c103c8667d42b4d3a42dcdca1fde249f5c765","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20268ab0e8b28c4cad675190e374e5f7fd66633a81d995d5a694bbbfc95d21cb"} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2858acb94011df79dd2bd08f818c103c8667d42b4d3a42dcdca1fde249f5c765"} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10e5ebcfd30eef9892099700c83fc4e67e1980c7b5182441d34d35837defa305","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10e5ebcfd30eef9892099700c83fc4e67e1980c7b5182441d34d35837defa305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10e5ebcfd30eef9892099700c83fc4e67e1980c7b5182441d34d35837defa305","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10e5ebcfd30eef9892099700c83fc4e67e1980c7b5182441d34d35837defa305"} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10e5ebcfd30eef9892099700c83fc4e67e1980c7b5182441d34d35837defa305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10e5ebcfd30eef9892099700c83fc4e67e1980c7b5182441d34d35837defa305","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10e5ebcfd30eef9892099700c83fc4e67e1980c7b5182441d34d35837defa305"} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10e5ebcfd30eef9892099700c83fc4e67e1980c7b5182441d34d35837defa305","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10e5ebcfd30eef9892099700c83fc4e67e1980c7b5182441d34d35837defa305"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10e5ebcfd30eef9892099700c83fc4e67e1980c7b5182441d34d35837defa305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7032bbb5c20b9b23ebad1702e678a1638a9a50b19bb61b6f493a5a89436a73f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7032bbb5c20b9b23ebad1702e678a1638a9a50b19bb61b6f493a5a89436a73f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10e5ebcfd30eef9892099700c83fc4e67e1980c7b5182441d34d35837defa305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7032bbb5c20b9b23ebad1702e678a1638a9a50b19bb61b6f493a5a89436a73f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7032bbb5c20b9b23ebad1702e678a1638a9a50b19bb61b6f493a5a89436a73f9"} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7032bbb5c20b9b23ebad1702e678a1638a9a50b19bb61b6f493a5a89436a73f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7032bbb5c20b9b23ebad1702e678a1638a9a50b19bb61b6f493a5a89436a73f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7032bbb5c20b9b23ebad1702e678a1638a9a50b19bb61b6f493a5a89436a73f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10e5ebcfd30eef9892099700c83fc4e67e1980c7b5182441d34d35837defa305"} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7032bbb5c20b9b23ebad1702e678a1638a9a50b19bb61b6f493a5a89436a73f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7032bbb5c20b9b23ebad1702e678a1638a9a50b19bb61b6f493a5a89436a73f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7032bbb5c20b9b23ebad1702e678a1638a9a50b19bb61b6f493a5a89436a73f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7032bbb5c20b9b23ebad1702e678a1638a9a50b19bb61b6f493a5a89436a73f9"} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7032bbb5c20b9b23ebad1702e678a1638a9a50b19bb61b6f493a5a89436a73f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7032bbb5c20b9b23ebad1702e678a1638a9a50b19bb61b6f493a5a89436a73f9"} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7032bbb5c20b9b23ebad1702e678a1638a9a50b19bb61b6f493a5a89436a73f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7032bbb5c20b9b23ebad1702e678a1638a9a50b19bb61b6f493a5a89436a73f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7032bbb5c20b9b23ebad1702e678a1638a9a50b19bb61b6f493a5a89436a73f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7032bbb5c20b9b23ebad1702e678a1638a9a50b19bb61b6f493a5a89436a73f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7032bbb5c20b9b23ebad1702e678a1638a9a50b19bb61b6f493a5a89436a73f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7032bbb5c20b9b23ebad1702e678a1638a9a50b19bb61b6f493a5a89436a73f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7032bbb5c20b9b23ebad1702e678a1638a9a50b19bb61b6f493a5a89436a73f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7032bbb5c20b9b23ebad1702e678a1638a9a50b19bb61b6f493a5a89436a73f9"} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7032bbb5c20b9b23ebad1702e678a1638a9a50b19bb61b6f493a5a89436a73f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7032bbb5c20b9b23ebad1702e678a1638a9a50b19bb61b6f493a5a89436a73f9"} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7032bbb5c20b9b23ebad1702e678a1638a9a50b19bb61b6f493a5a89436a73f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7032bbb5c20b9b23ebad1702e678a1638a9a50b19bb61b6f493a5a89436a73f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7032bbb5c20b9b23ebad1702e678a1638a9a50b19bb61b6f493a5a89436a73f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7032bbb5c20b9b23ebad1702e678a1638a9a50b19bb61b6f493a5a89436a73f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614"} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7032bbb5c20b9b23ebad1702e678a1638a9a50b19bb61b6f493a5a89436a73f9"} {"level":"info","ts":"2026-07-14T08:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614"} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4"} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4"} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4"} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1"} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1"} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1"} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4"} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1"} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1"} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1"} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1"} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1"} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1"} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1"} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1"} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1"} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1"} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1"} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1"} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1"} {"level":"debug","ts":"2026-07-14T08:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:33:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:33:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:33:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:33:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278"} {"level":"info","ts":"2026-07-14T08:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:33:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:33:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T08:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T08:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278"} {"level":"info","ts":"2026-07-14T08:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278"} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278"} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278"} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278"} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278"} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278"} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278"} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b2fd95d68919fb350dbd8f1921643f6b05328e226306f46a5186cdffec55f0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b2fd95d68919fb350dbd8f1921643f6b05328e226306f46a5186cdffec55f0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b2fd95d68919fb350dbd8f1921643f6b05328e226306f46a5186cdffec55f0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b2fd95d68919fb350dbd8f1921643f6b05328e226306f46a5186cdffec55f0b"} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b2fd95d68919fb350dbd8f1921643f6b05328e226306f46a5186cdffec55f0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b2fd95d68919fb350dbd8f1921643f6b05328e226306f46a5186cdffec55f0b"} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b2fd95d68919fb350dbd8f1921643f6b05328e226306f46a5186cdffec55f0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b2fd95d68919fb350dbd8f1921643f6b05328e226306f46a5186cdffec55f0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278"} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b2fd95d68919fb350dbd8f1921643f6b05328e226306f46a5186cdffec55f0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b2fd95d68919fb350dbd8f1921643f6b05328e226306f46a5186cdffec55f0b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b2fd95d68919fb350dbd8f1921643f6b05328e226306f46a5186cdffec55f0b"} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207233ac3984aab9b212358b473f4acf7903374f323e94171c12bbe2ae1523a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207233ac3984aab9b212358b473f4acf7903374f323e94171c12bbe2ae1523a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207233ac3984aab9b212358b473f4acf7903374f323e94171c12bbe2ae1523a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207233ac3984aab9b212358b473f4acf7903374f323e94171c12bbe2ae1523a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207233ac3984aab9b212358b473f4acf7903374f323e94171c12bbe2ae1523a4"} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207233ac3984aab9b212358b473f4acf7903374f323e94171c12bbe2ae1523a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207233ac3984aab9b212358b473f4acf7903374f323e94171c12bbe2ae1523a4"} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207233ac3984aab9b212358b473f4acf7903374f323e94171c12bbe2ae1523a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["207233ac3984aab9b212358b473f4acf7903374f323e94171c12bbe2ae1523a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207233ac3984aab9b212358b473f4acf7903374f323e94171c12bbe2ae1523a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207233ac3984aab9b212358b473f4acf7903374f323e94171c12bbe2ae1523a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207233ac3984aab9b212358b473f4acf7903374f323e94171c12bbe2ae1523a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207233ac3984aab9b212358b473f4acf7903374f323e94171c12bbe2ae1523a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207233ac3984aab9b212358b473f4acf7903374f323e94171c12bbe2ae1523a4"} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207233ac3984aab9b212358b473f4acf7903374f323e94171c12bbe2ae1523a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207233ac3984aab9b212358b473f4acf7903374f323e94171c12bbe2ae1523a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207233ac3984aab9b212358b473f4acf7903374f323e94171c12bbe2ae1523a4"} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207233ac3984aab9b212358b473f4acf7903374f323e94171c12bbe2ae1523a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["207233ac3984aab9b212358b473f4acf7903374f323e94171c12bbe2ae1523a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207233ac3984aab9b212358b473f4acf7903374f323e94171c12bbe2ae1523a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7826cd1f403515d1792347fd1885db1145bddfc8427327e34c937d428df579a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7826cd1f403515d1792347fd1885db1145bddfc8427327e34c937d428df579a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207233ac3984aab9b212358b473f4acf7903374f323e94171c12bbe2ae1523a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7826cd1f403515d1792347fd1885db1145bddfc8427327e34c937d428df579a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7826cd1f403515d1792347fd1885db1145bddfc8427327e34c937d428df579a5"} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7826cd1f403515d1792347fd1885db1145bddfc8427327e34c937d428df579a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7826cd1f403515d1792347fd1885db1145bddfc8427327e34c937d428df579a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7826cd1f403515d1792347fd1885db1145bddfc8427327e34c937d428df579a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7826cd1f403515d1792347fd1885db1145bddfc8427327e34c937d428df579a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207233ac3984aab9b212358b473f4acf7903374f323e94171c12bbe2ae1523a4"} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7826cd1f403515d1792347fd1885db1145bddfc8427327e34c937d428df579a5"} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48"} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48"} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5934045fbdf9d9de5a399a8940e6d2a8fef5b4433edb0f2f28df815e87e19a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48"} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5934045fbdf9d9de5a399a8940e6d2a8fef5b4433edb0f2f28df815e87e19a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5934045fbdf9d9de5a399a8940e6d2a8fef5b4433edb0f2f28df815e87e19a4"} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5934045fbdf9d9de5a399a8940e6d2a8fef5b4433edb0f2f28df815e87e19a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5934045fbdf9d9de5a399a8940e6d2a8fef5b4433edb0f2f28df815e87e19a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5934045fbdf9d9de5a399a8940e6d2a8fef5b4433edb0f2f28df815e87e19a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48"} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5934045fbdf9d9de5a399a8940e6d2a8fef5b4433edb0f2f28df815e87e19a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5934045fbdf9d9de5a399a8940e6d2a8fef5b4433edb0f2f28df815e87e19a4"} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5934045fbdf9d9de5a399a8940e6d2a8fef5b4433edb0f2f28df815e87e19a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5934045fbdf9d9de5a399a8940e6d2a8fef5b4433edb0f2f28df815e87e19a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5934045fbdf9d9de5a399a8940e6d2a8fef5b4433edb0f2f28df815e87e19a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5934045fbdf9d9de5a399a8940e6d2a8fef5b4433edb0f2f28df815e87e19a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5934045fbdf9d9de5a399a8940e6d2a8fef5b4433edb0f2f28df815e87e19a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5934045fbdf9d9de5a399a8940e6d2a8fef5b4433edb0f2f28df815e87e19a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48"} {"level":"error","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f5934045fbdf9d9de5a399a8940e6d2a8fef5b4433edb0f2f28df815e87e19a4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f5934045fbdf9d9de5a399a8940e6d2a8fef5b4433edb0f2f28df815e87e19a4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5934045fbdf9d9de5a399a8940e6d2a8fef5b4433edb0f2f28df815e87e19a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5934045fbdf9d9de5a399a8940e6d2a8fef5b4433edb0f2f28df815e87e19a4"} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5934045fbdf9d9de5a399a8940e6d2a8fef5b4433edb0f2f28df815e87e19a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a"} {"level":"info","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:33:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5934045fbdf9d9de5a399a8940e6d2a8fef5b4433edb0f2f28df815e87e19a4"} {"level":"info","ts":"2026-07-14T08:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5934045fbdf9d9de5a399a8940e6d2a8fef5b4433edb0f2f28df815e87e19a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:33:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:33:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5934045fbdf9d9de5a399a8940e6d2a8fef5b4433edb0f2f28df815e87e19a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a"} {"level":"info","ts":"2026-07-14T08:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5934045fbdf9d9de5a399a8940e6d2a8fef5b4433edb0f2f28df815e87e19a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:33:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:33:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bf6d4687f93f4a28a3bad661d2bdb4e36692c43e9161d04a4bed78b225ff164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:33:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:33:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48"} {"level":"info","ts":"2026-07-14T08:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bf6d4687f93f4a28a3bad661d2bdb4e36692c43e9161d04a4bed78b225ff164","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5934045fbdf9d9de5a399a8940e6d2a8fef5b4433edb0f2f28df815e87e19a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:33:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:33:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a"} {"level":"info","ts":"2026-07-14T08:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bf6d4687f93f4a28a3bad661d2bdb4e36692c43e9161d04a4bed78b225ff164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:33:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:33:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bf6d4687f93f4a28a3bad661d2bdb4e36692c43e9161d04a4bed78b225ff164"} {"level":"info","ts":"2026-07-14T08:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bf6d4687f93f4a28a3bad661d2bdb4e36692c43e9161d04a4bed78b225ff164","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bf6d4687f93f4a28a3bad661d2bdb4e36692c43e9161d04a4bed78b225ff164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:33:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:33:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bf6d4687f93f4a28a3bad661d2bdb4e36692c43e9161d04a4bed78b225ff164"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bf6d4687f93f4a28a3bad661d2bdb4e36692c43e9161d04a4bed78b225ff164","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bf6d4687f93f4a28a3bad661d2bdb4e36692c43e9161d04a4bed78b225ff164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:33:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:33:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bf6d4687f93f4a28a3bad661d2bdb4e36692c43e9161d04a4bed78b225ff164"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T08:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3bf6d4687f93f4a28a3bad661d2bdb4e36692c43e9161d04a4bed78b225ff164","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3bf6d4687f93f4a28a3bad661d2bdb4e36692c43e9161d04a4bed78b225ff164\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T08:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bf6d4687f93f4a28a3bad661d2bdb4e36692c43e9161d04a4bed78b225ff164","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bf6d4687f93f4a28a3bad661d2bdb4e36692c43e9161d04a4bed78b225ff164","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5934045fbdf9d9de5a399a8940e6d2a8fef5b4433edb0f2f28df815e87e19a4"} {"level":"info","ts":"2026-07-14T08:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48"} {"level":"info","ts":"2026-07-14T08:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bf6d4687f93f4a28a3bad661d2bdb4e36692c43e9161d04a4bed78b225ff164"} {"level":"debug","ts":"2026-07-14T08:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278"} {"level":"debug","ts":"2026-07-14T08:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:33:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:33:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614"} {"level":"debug","ts":"2026-07-14T08:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614"} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614"} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1"} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614"} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614"} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98a7ebba5212c3be299e242ec3538466c877438b6e1da04b294186489a2fadec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614"} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98a7ebba5212c3be299e242ec3538466c877438b6e1da04b294186489a2fadec"} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614"} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614"} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4"} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4"} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614"} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4"} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614"} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53be2cb11cca6fd2d7d04339911d28e690f11703a7acf6c183bcda528553969a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4"} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53be2cb11cca6fd2d7d04339911d28e690f11703a7acf6c183bcda528553969a"} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614"} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0352dfd7793bb10611cbb5728d974f362364b047008f8c740877d1e3472cdd17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4"} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0352dfd7793bb10611cbb5728d974f362364b047008f8c740877d1e3472cdd17"} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a"} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a"} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7826cd1f403515d1792347fd1885db1145bddfc8427327e34c937d428df579a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a"} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7826cd1f403515d1792347fd1885db1145bddfc8427327e34c937d428df579a5"} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a"} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a"} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a"} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a"} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bf6d4687f93f4a28a3bad661d2bdb4e36692c43e9161d04a4bed78b225ff164","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bf6d4687f93f4a28a3bad661d2bdb4e36692c43e9161d04a4bed78b225ff164"} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:33:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe"} {"level":"debug","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe"} {"level":"debug","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:33:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:33:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:33:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:33:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36c70d93efae14d85a08ac4fd3ea85ed809afa9ab5ba84848ac1060ec1d14cc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe"} {"level":"debug","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:33:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:33:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36c70d93efae14d85a08ac4fd3ea85ed809afa9ab5ba84848ac1060ec1d14cc5"} {"level":"info","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:33:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:33:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe"} {"level":"info","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe"} {"level":"debug","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe4b41e59814b56542d18a1aa38c384b5c907c8ee6c4852f4a028de84e59ca9f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe"} {"level":"debug","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c18c826ffd7886328ae0cfc95adb98eb55f0e7631ed255948a1a2202aa34cde3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:33:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:33:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe4b41e59814b56542d18a1aa38c384b5c907c8ee6c4852f4a028de84e59ca9f"} {"level":"info","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c18c826ffd7886328ae0cfc95adb98eb55f0e7631ed255948a1a2202aa34cde3"} {"level":"info","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"} {"level":"debug","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2858acb94011df79dd2bd08f818c103c8667d42b4d3a42dcdca1fde249f5c765","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe"} {"level":"debug","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207233ac3984aab9b212358b473f4acf7903374f323e94171c12bbe2ae1523a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b2fd95d68919fb350dbd8f1921643f6b05328e226306f46a5186cdffec55f0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a38aab22122ea7d79705f35df0f60805fbb8e8283dacfeb38ebbbc660eb1bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2858acb94011df79dd2bd08f818c103c8667d42b4d3a42dcdca1fde249f5c765"} {"level":"debug","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10e5ebcfd30eef9892099700c83fc4e67e1980c7b5182441d34d35837defa305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5934045fbdf9d9de5a399a8940e6d2a8fef5b4433edb0f2f28df815e87e19a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207233ac3984aab9b212358b473f4acf7903374f323e94171c12bbe2ae1523a4"} {"level":"debug","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b2fd95d68919fb350dbd8f1921643f6b05328e226306f46a5186cdffec55f0b"} {"level":"info","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60a38aab22122ea7d79705f35df0f60805fbb8e8283dacfeb38ebbbc660eb1bb"} {"level":"info","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10e5ebcfd30eef9892099700c83fc4e67e1980c7b5182441d34d35837defa305"} {"level":"debug","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7032bbb5c20b9b23ebad1702e678a1638a9a50b19bb61b6f493a5a89436a73f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20268ab0e8b28c4cad675190e374e5f7fd66633a81d995d5a694bbbfc95d21cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5934045fbdf9d9de5a399a8940e6d2a8fef5b4433edb0f2f28df815e87e19a4"} {"level":"info","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48"} {"level":"info","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7032bbb5c20b9b23ebad1702e678a1638a9a50b19bb61b6f493a5a89436a73f9"} {"level":"info","ts":"2026-07-14T08:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20268ab0e8b28c4cad675190e374e5f7fd66633a81d995d5a694bbbfc95d21cb"} {"level":"info","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3336a1e-7b4f-45b3-b247-efe6f60223e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45346","PortSpecifier":{"PortValue":45346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c3336a1e-7b4f-45b3-b247-efe6f60223e0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3336a1e-7b4f-45b3-b247-efe6f60223e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45346","PortSpecifier":{"PortValue":45346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784018011,"nanos":230928454},"http":{"id":"c3336a1e-7b4f-45b3-b247-efe6f60223e0","method":"POST","headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c3336a1e-7b4f-45b3-b247-efe6f60223e0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c3336a1e-7b4f-45b3-b247-efe6f60223e0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"]}} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c3336a1e-7b4f-45b3-b247-efe6f60223e0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0352dfd7793bb10611cbb5728d974f362364b047008f8c740877d1e3472cdd17"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3336a1e-7b4f-45b3-b247-efe6f60223e0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3336a1e-7b4f-45b3-b247-efe6f60223e0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3336a1e-7b4f-45b3-b247-efe6f60223e0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0324b2/sub-test-model-0324b2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c3336a1e-7b4f-45b3-b247-efe6f60223e0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3336a1e-7b4f-45b3-b247-efe6f60223e0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3336a1e-7b4f-45b3-b247-efe6f60223e0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3336a1e-7b4f-45b3-b247-efe6f60223e0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3336a1e-7b4f-45b3-b247-efe6f60223e0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37616f53-5769-4869-b80e-38ecf32b54f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52606","PortSpecifier":{"PortValue":52606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37616f53-5769-4869-b80e-38ecf32b54f1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37616f53-5769-4869-b80e-38ecf32b54f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52606","PortSpecifier":{"PortValue":52606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784018011,"nanos":271120090},"http":{"id":"37616f53-5769-4869-b80e-38ecf32b54f1","method":"POST","headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"37616f53-5769-4869-b80e-38ecf32b54f1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37616f53-5769-4869-b80e-38ecf32b54f1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"]}} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37616f53-5769-4869-b80e-38ecf32b54f1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37616f53-5769-4869-b80e-38ecf32b54f1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37616f53-5769-4869-b80e-38ecf32b54f1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37616f53-5769-4869-b80e-38ecf32b54f1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b9c837/sub-test-model-b9c837\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"37616f53-5769-4869-b80e-38ecf32b54f1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37616f53-5769-4869-b80e-38ecf32b54f1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37616f53-5769-4869-b80e-38ecf32b54f1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37616f53-5769-4869-b80e-38ecf32b54f1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37616f53-5769-4869-b80e-38ecf32b54f1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"302c447a-0f8a-4da5-9e29-566651331d63","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45354","PortSpecifier":{"PortValue":45354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"302c447a-0f8a-4da5-9e29-566651331d63","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"302c447a-0f8a-4da5-9e29-566651331d63","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45354","PortSpecifier":{"PortValue":45354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784018011,"nanos":309860544},"http":{"id":"302c447a-0f8a-4da5-9e29-566651331d63","method":"GET","headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"302c447a-0f8a-4da5-9e29-566651331d63","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RwnmoroOIfHU2cxx_Duxg4MpLR6qPza218sR2xbKv3Yzo00BCfg0EMwtIO1H"} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"302c447a-0f8a-4da5-9e29-566651331d63","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RwnmoroOIfHU2cxx_Duxg4MpLR6qPza218sR2xbKv3Yzo00BCfg0EMwtIO1H\"}"} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"302c447a-0f8a-4da5-9e29-566651331d63","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c0ee431a-b13f-4a17-b5de-986f254b8c46","keyName":"e2e-sub-iso-59cad2","subscription":"e2e-a-only-4335ef","tenant":"e2e-shared-a-0324b2","userId":"c0ee431a-b13f-4a17-b5de-986f254b8c46","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"302c447a-0f8a-4da5-9e29-566651331d63","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"302c447a-0f8a-4da5-9e29-566651331d63","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"302c447a-0f8a-4da5-9e29-566651331d63","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"302c447a-0f8a-4da5-9e29-566651331d63","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0324b2/sub-test-model-0324b2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"302c447a-0f8a-4da5-9e29-566651331d63","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"302c447a-0f8a-4da5-9e29-566651331d63","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"302c447a-0f8a-4da5-9e29-566651331d63","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-4335ef"} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"302c447a-0f8a-4da5-9e29-566651331d63","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"302c447a-0f8a-4da5-9e29-566651331d63","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"302c447a-0f8a-4da5-9e29-566651331d63","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"664156d4-027c-4df7-a61c-07dd985b17c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52620","PortSpecifier":{"PortValue":52620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"664156d4-027c-4df7-a61c-07dd985b17c3","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"664156d4-027c-4df7-a61c-07dd985b17c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52620","PortSpecifier":{"PortValue":52620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784018011,"nanos":356221695},"http":{"id":"664156d4-027c-4df7-a61c-07dd985b17c3","method":"GET","headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"664156d4-027c-4df7-a61c-07dd985b17c3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zOgmkiAhUGeWc4Sh_rJS1zrNkgfkFgKAdqKVXTLyD4StW9ktEYgagm8NS1kf"} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"664156d4-027c-4df7-a61c-07dd985b17c3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b9c837.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zOgmkiAhUGeWc4Sh_rJS1zrNkgfkFgKAdqKVXTLyD4StW9ktEYgagm8NS1kf\"}"} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"664156d4-027c-4df7-a61c-07dd985b17c3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b9c837.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"707f716c-9bee-441e-bc70-8fc031423e40","keyName":"e2e-sub-iso-8e5a44","subscription":"e2e-b-only-4335ef","tenant":"e2e-shared-b-b9c837","userId":"707f716c-9bee-441e-bc70-8fc031423e40","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"664156d4-027c-4df7-a61c-07dd985b17c3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"664156d4-027c-4df7-a61c-07dd985b17c3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"664156d4-027c-4df7-a61c-07dd985b17c3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"664156d4-027c-4df7-a61c-07dd985b17c3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b9c837/sub-test-model-b9c837\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"664156d4-027c-4df7-a61c-07dd985b17c3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"664156d4-027c-4df7-a61c-07dd985b17c3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"664156d4-027c-4df7-a61c-07dd985b17c3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"664156d4-027c-4df7-a61c-07dd985b17c3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-4335ef"} {"level":"info","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"664156d4-027c-4df7-a61c-07dd985b17c3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:33:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"664156d4-027c-4df7-a61c-07dd985b17c3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c285543-0453-48b9-9d13-fccabaa877d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58070","PortSpecifier":{"PortValue":58070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9c285543-0453-48b9-9d13-fccabaa877d9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c285543-0453-48b9-9d13-fccabaa877d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58070","PortSpecifier":{"PortValue":58070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784018021,"nanos":423010345},"http":{"id":"9c285543-0453-48b9-9d13-fccabaa877d9","method":"POST","headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9c285543-0453-48b9-9d13-fccabaa877d9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9c285543-0453-48b9-9d13-fccabaa877d9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"]}} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9c285543-0453-48b9-9d13-fccabaa877d9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0352dfd7793bb10611cbb5728d974f362364b047008f8c740877d1e3472cdd17"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c285543-0453-48b9-9d13-fccabaa877d9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c285543-0453-48b9-9d13-fccabaa877d9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c285543-0453-48b9-9d13-fccabaa877d9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0324b2/sub-test-model-0324b2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9c285543-0453-48b9-9d13-fccabaa877d9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c285543-0453-48b9-9d13-fccabaa877d9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c285543-0453-48b9-9d13-fccabaa877d9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c285543-0453-48b9-9d13-fccabaa877d9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c285543-0453-48b9-9d13-fccabaa877d9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c86c9356-95f9-408a-9a55-044016497708","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51922","PortSpecifier":{"PortValue":51922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c86c9356-95f9-408a-9a55-044016497708","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c86c9356-95f9-408a-9a55-044016497708","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51922","PortSpecifier":{"PortValue":51922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784018021,"nanos":457275397},"http":{"id":"c86c9356-95f9-408a-9a55-044016497708","method":"POST","headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c86c9356-95f9-408a-9a55-044016497708","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c86c9356-95f9-408a-9a55-044016497708","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"]}} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c86c9356-95f9-408a-9a55-044016497708","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c86c9356-95f9-408a-9a55-044016497708","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c86c9356-95f9-408a-9a55-044016497708","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c86c9356-95f9-408a-9a55-044016497708","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b9c837/sub-test-model-b9c837\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c86c9356-95f9-408a-9a55-044016497708","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c86c9356-95f9-408a-9a55-044016497708","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c86c9356-95f9-408a-9a55-044016497708","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c86c9356-95f9-408a-9a55-044016497708","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c86c9356-95f9-408a-9a55-044016497708","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63af3132-c3ba-4d87-8a6e-75cb9fb8c0a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58086","PortSpecifier":{"PortValue":58086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"63af3132-c3ba-4d87-8a6e-75cb9fb8c0a8","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63af3132-c3ba-4d87-8a6e-75cb9fb8c0a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58086","PortSpecifier":{"PortValue":58086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784018021,"nanos":489236843},"http":{"id":"63af3132-c3ba-4d87-8a6e-75cb9fb8c0a8","method":"POST","headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"63af3132-c3ba-4d87-8a6e-75cb9fb8c0a8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HxtgiQVghGPnkBEl_AHNKYuL8lNsu3hhXVTSqjwu7NOCwy4dmDqNC57VbSD3"} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"63af3132-c3ba-4d87-8a6e-75cb9fb8c0a8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HxtgiQVghGPnkBEl_AHNKYuL8lNsu3hhXVTSqjwu7NOCwy4dmDqNC57VbSD3\"}"} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"63af3132-c3ba-4d87-8a6e-75cb9fb8c0a8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3c272fac-b606-4d4c-b255-6a3758562587","keyName":"e2e-sub-iso-2b2ee5","subscription":"e2e-shared-sub-ff20cf","tenant":"e2e-shared-a-0324b2","userId":"3c272fac-b606-4d4c-b255-6a3758562587","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"63af3132-c3ba-4d87-8a6e-75cb9fb8c0a8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63af3132-c3ba-4d87-8a6e-75cb9fb8c0a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63af3132-c3ba-4d87-8a6e-75cb9fb8c0a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63af3132-c3ba-4d87-8a6e-75cb9fb8c0a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0324b2/sub-test-model-0324b2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"63af3132-c3ba-4d87-8a6e-75cb9fb8c0a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63af3132-c3ba-4d87-8a6e-75cb9fb8c0a8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63af3132-c3ba-4d87-8a6e-75cb9fb8c0a8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-ff20cf"} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63af3132-c3ba-4d87-8a6e-75cb9fb8c0a8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63af3132-c3ba-4d87-8a6e-75cb9fb8c0a8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63af3132-c3ba-4d87-8a6e-75cb9fb8c0a8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24d8bf94-fee6-4f54-8619-d43eddd1662b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51926","PortSpecifier":{"PortValue":51926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"24d8bf94-fee6-4f54-8619-d43eddd1662b","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24d8bf94-fee6-4f54-8619-d43eddd1662b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51926","PortSpecifier":{"PortValue":51926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784018021,"nanos":524599173},"http":{"id":"24d8bf94-fee6-4f54-8619-d43eddd1662b","method":"POST","headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"24d8bf94-fee6-4f54-8619-d43eddd1662b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HRS6TrTxVvMprcY3_bQsLGVrUrFYVukWQiaJb48NEEwPwunFNRvkjKG0Ug4I"} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"24d8bf94-fee6-4f54-8619-d43eddd1662b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b9c837.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HRS6TrTxVvMprcY3_bQsLGVrUrFYVukWQiaJb48NEEwPwunFNRvkjKG0Ug4I\"}"} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"24d8bf94-fee6-4f54-8619-d43eddd1662b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b9c837.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ca946c8f-3ff0-4c0c-8eda-4145cc8984a3","keyName":"e2e-sub-iso-82d70b","subscription":"e2e-shared-sub-ff20cf","tenant":"e2e-shared-b-b9c837","userId":"ca946c8f-3ff0-4c0c-8eda-4145cc8984a3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"24d8bf94-fee6-4f54-8619-d43eddd1662b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24d8bf94-fee6-4f54-8619-d43eddd1662b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24d8bf94-fee6-4f54-8619-d43eddd1662b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24d8bf94-fee6-4f54-8619-d43eddd1662b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b9c837/sub-test-model-b9c837\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"24d8bf94-fee6-4f54-8619-d43eddd1662b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24d8bf94-fee6-4f54-8619-d43eddd1662b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24d8bf94-fee6-4f54-8619-d43eddd1662b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24d8bf94-fee6-4f54-8619-d43eddd1662b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-ff20cf"} {"level":"info","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24d8bf94-fee6-4f54-8619-d43eddd1662b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:33:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24d8bf94-fee6-4f54-8619-d43eddd1662b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7f93a79370ac06f1d3a826c4a17257dc390335b0a79871dc0b6be653f505278"} {"level":"info","ts":"2026-07-14T08:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60a38aab22122ea7d79705f35df0f60805fbb8e8283dacfeb38ebbbc660eb1bb"} {"level":"info","ts":"2026-07-14T08:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5934045fbdf9d9de5a399a8940e6d2a8fef5b4433edb0f2f28df815e87e19a4"} {"level":"info","ts":"2026-07-14T08:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7826cd1f403515d1792347fd1885db1145bddfc8427327e34c937d428df579a5"} {"level":"info","ts":"2026-07-14T08:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e55f04174aeaabf4355ea575eacafd70cb644d98d95f44a2810c7d131c7aa8f1"} {"level":"info","ts":"2026-07-14T08:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32fab01c5084a731e11e7ab4ab0b6e35f7c2c0806a30509b85e4b3f8abcaeaa4"} {"level":"info","ts":"2026-07-14T08:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b2fd95d68919fb350dbd8f1921643f6b05328e226306f46a5186cdffec55f0b"} {"level":"info","ts":"2026-07-14T08:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/207233ac3984aab9b212358b473f4acf7903374f323e94171c12bbe2ae1523a4"} {"level":"info","ts":"2026-07-14T08:33:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7dd533c8397e2b65f77a6718b9948df4d753f49c6f6d4a8409179d53fdff7614"} {"level":"info","ts":"2026-07-14T08:33:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3bf6d4687f93f4a28a3bad661d2bdb4e36692c43e9161d04a4bed78b225ff164"} {"level":"info","ts":"2026-07-14T08:33:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20268ab0e8b28c4cad675190e374e5f7fd66633a81d995d5a694bbbfc95d21cb"} {"level":"info","ts":"2026-07-14T08:33:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5b712fb465938c4d66c1433e36525024e2206f257205e16a44d30f7caedd68a"} {"level":"info","ts":"2026-07-14T08:33:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/10e5ebcfd30eef9892099700c83fc4e67e1980c7b5182441d34d35837defa305"} {"level":"info","ts":"2026-07-14T08:33:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7032bbb5c20b9b23ebad1702e678a1638a9a50b19bb61b6f493a5a89436a73f9"} {"level":"info","ts":"2026-07-14T08:33:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9ef3814d999f6a899fe2bab251ee05ca1d9497e087192dc9e432078680d7a48"} {"level":"info","ts":"2026-07-14T08:33:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2858acb94011df79dd2bd08f818c103c8667d42b4d3a42dcdca1fde249f5c765"} {"level":"debug","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caa4f9b36401457f719a881eeb1f5f96aa0ea4dd38c1fbb07717262fc29788ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caa4f9b36401457f719a881eeb1f5f96aa0ea4dd38c1fbb07717262fc29788ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caa4f9b36401457f719a881eeb1f5f96aa0ea4dd38c1fbb07717262fc29788ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caa4f9b36401457f719a881eeb1f5f96aa0ea4dd38c1fbb07717262fc29788ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa4f9b36401457f719a881eeb1f5f96aa0ea4dd38c1fbb07717262fc29788ef"} {"level":"debug","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caa4f9b36401457f719a881eeb1f5f96aa0ea4dd38c1fbb07717262fc29788ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa4f9b36401457f719a881eeb1f5f96aa0ea4dd38c1fbb07717262fc29788ef"} {"level":"debug","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caa4f9b36401457f719a881eeb1f5f96aa0ea4dd38c1fbb07717262fc29788ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caa4f9b36401457f719a881eeb1f5f96aa0ea4dd38c1fbb07717262fc29788ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caa4f9b36401457f719a881eeb1f5f96aa0ea4dd38c1fbb07717262fc29788ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caa4f9b36401457f719a881eeb1f5f96aa0ea4dd38c1fbb07717262fc29788ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caa4f9b36401457f719a881eeb1f5f96aa0ea4dd38c1fbb07717262fc29788ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caa4f9b36401457f719a881eeb1f5f96aa0ea4dd38c1fbb07717262fc29788ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caa4f9b36401457f719a881eeb1f5f96aa0ea4dd38c1fbb07717262fc29788ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa4f9b36401457f719a881eeb1f5f96aa0ea4dd38c1fbb07717262fc29788ef"} {"level":"debug","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caa4f9b36401457f719a881eeb1f5f96aa0ea4dd38c1fbb07717262fc29788ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa4f9b36401457f719a881eeb1f5f96aa0ea4dd38c1fbb07717262fc29788ef"} {"level":"debug","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caa4f9b36401457f719a881eeb1f5f96aa0ea4dd38c1fbb07717262fc29788ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caa4f9b36401457f719a881eeb1f5f96aa0ea4dd38c1fbb07717262fc29788ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caa4f9b36401457f719a881eeb1f5f96aa0ea4dd38c1fbb07717262fc29788ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caa4f9b36401457f719a881eeb1f5f96aa0ea4dd38c1fbb07717262fc29788ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa4f9b36401457f719a881eeb1f5f96aa0ea4dd38c1fbb07717262fc29788ef"} {"level":"debug","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60e5128ca1be36b3d1d3e2819194e6e8295ed2fced0a7dca400b1bec23347d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60e5128ca1be36b3d1d3e2819194e6e8295ed2fced0a7dca400b1bec23347d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60e5128ca1be36b3d1d3e2819194e6e8295ed2fced0a7dca400b1bec23347d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60e5128ca1be36b3d1d3e2819194e6e8295ed2fced0a7dca400b1bec23347d2a"} {"level":"info","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60e5128ca1be36b3d1d3e2819194e6e8295ed2fced0a7dca400b1bec23347d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60e5128ca1be36b3d1d3e2819194e6e8295ed2fced0a7dca400b1bec23347d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"60e5128ca1be36b3d1d3e2819194e6e8295ed2fced0a7dca400b1bec23347d2a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"60e5128ca1be36b3d1d3e2819194e6e8295ed2fced0a7dca400b1bec23347d2a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60e5128ca1be36b3d1d3e2819194e6e8295ed2fced0a7dca400b1bec23347d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60e5128ca1be36b3d1d3e2819194e6e8295ed2fced0a7dca400b1bec23347d2a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60e5128ca1be36b3d1d3e2819194e6e8295ed2fced0a7dca400b1bec23347d2a"} {"level":"info","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60e5128ca1be36b3d1d3e2819194e6e8295ed2fced0a7dca400b1bec23347d2a"} {"level":"debug","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60e5128ca1be36b3d1d3e2819194e6e8295ed2fced0a7dca400b1bec23347d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60e5128ca1be36b3d1d3e2819194e6e8295ed2fced0a7dca400b1bec23347d2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60e5128ca1be36b3d1d3e2819194e6e8295ed2fced0a7dca400b1bec23347d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60e5128ca1be36b3d1d3e2819194e6e8295ed2fced0a7dca400b1bec23347d2a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60e5128ca1be36b3d1d3e2819194e6e8295ed2fced0a7dca400b1bec23347d2a"} {"level":"debug","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e66862f125201439c8779fccb2ffc631b52e9a87a0252d703162d527b04c563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e66862f125201439c8779fccb2ffc631b52e9a87a0252d703162d527b04c563","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e66862f125201439c8779fccb2ffc631b52e9a87a0252d703162d527b04c563","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e66862f125201439c8779fccb2ffc631b52e9a87a0252d703162d527b04c563","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e66862f125201439c8779fccb2ffc631b52e9a87a0252d703162d527b04c563"} {"level":"debug","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e66862f125201439c8779fccb2ffc631b52e9a87a0252d703162d527b04c563","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e66862f125201439c8779fccb2ffc631b52e9a87a0252d703162d527b04c563"} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e66862f125201439c8779fccb2ffc631b52e9a87a0252d703162d527b04c563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e66862f125201439c8779fccb2ffc631b52e9a87a0252d703162d527b04c563"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e66862f125201439c8779fccb2ffc631b52e9a87a0252d703162d527b04c563","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e66862f125201439c8779fccb2ffc631b52e9a87a0252d703162d527b04c563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e66862f125201439c8779fccb2ffc631b52e9a87a0252d703162d527b04c563","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"927405d2c852eda21d49df175efeb4c2f8ebef2e504a7fcd3059103977385628","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e66862f125201439c8779fccb2ffc631b52e9a87a0252d703162d527b04c563"} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"927405d2c852eda21d49df175efeb4c2f8ebef2e504a7fcd3059103977385628","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e66862f125201439c8779fccb2ffc631b52e9a87a0252d703162d527b04c563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e66862f125201439c8779fccb2ffc631b52e9a87a0252d703162d527b04c563"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/927405d2c852eda21d49df175efeb4c2f8ebef2e504a7fcd3059103977385628"} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e66862f125201439c8779fccb2ffc631b52e9a87a0252d703162d527b04c563","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"927405d2c852eda21d49df175efeb4c2f8ebef2e504a7fcd3059103977385628","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["927405d2c852eda21d49df175efeb4c2f8ebef2e504a7fcd3059103977385628"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"927405d2c852eda21d49df175efeb4c2f8ebef2e504a7fcd3059103977385628","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e66862f125201439c8779fccb2ffc631b52e9a87a0252d703162d527b04c563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e66862f125201439c8779fccb2ffc631b52e9a87a0252d703162d527b04c563"} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e66862f125201439c8779fccb2ffc631b52e9a87a0252d703162d527b04c563","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"927405d2c852eda21d49df175efeb4c2f8ebef2e504a7fcd3059103977385628","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/927405d2c852eda21d49df175efeb4c2f8ebef2e504a7fcd3059103977385628"} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"927405d2c852eda21d49df175efeb4c2f8ebef2e504a7fcd3059103977385628","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e66862f125201439c8779fccb2ffc631b52e9a87a0252d703162d527b04c563","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"927405d2c852eda21d49df175efeb4c2f8ebef2e504a7fcd3059103977385628","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["927405d2c852eda21d49df175efeb4c2f8ebef2e504a7fcd3059103977385628"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"927405d2c852eda21d49df175efeb4c2f8ebef2e504a7fcd3059103977385628","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7d503e0c808bbedc0a6b3e6cf6df36986bebe521478835d9373be3607e35156","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e66862f125201439c8779fccb2ffc631b52e9a87a0252d703162d527b04c563"} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7d503e0c808bbedc0a6b3e6cf6df36986bebe521478835d9373be3607e35156","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e66862f125201439c8779fccb2ffc631b52e9a87a0252d703162d527b04c563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e66862f125201439c8779fccb2ffc631b52e9a87a0252d703162d527b04c563"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/927405d2c852eda21d49df175efeb4c2f8ebef2e504a7fcd3059103977385628"} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e66862f125201439c8779fccb2ffc631b52e9a87a0252d703162d527b04c563","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"927405d2c852eda21d49df175efeb4c2f8ebef2e504a7fcd3059103977385628","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7d503e0c808bbedc0a6b3e6cf6df36986bebe521478835d9373be3607e35156","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7d503e0c808bbedc0a6b3e6cf6df36986bebe521478835d9373be3607e35156"} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7d503e0c808bbedc0a6b3e6cf6df36986bebe521478835d9373be3607e35156","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e66862f125201439c8779fccb2ffc631b52e9a87a0252d703162d527b04c563","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7d503e0c808bbedc0a6b3e6cf6df36986bebe521478835d9373be3607e35156","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7d503e0c808bbedc0a6b3e6cf6df36986bebe521478835d9373be3607e35156"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7d503e0c808bbedc0a6b3e6cf6df36986bebe521478835d9373be3607e35156","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7d503e0c808bbedc0a6b3e6cf6df36986bebe521478835d9373be3607e35156","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7d503e0c808bbedc0a6b3e6cf6df36986bebe521478835d9373be3607e35156"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/927405d2c852eda21d49df175efeb4c2f8ebef2e504a7fcd3059103977385628"} {"level":"error","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f7d503e0c808bbedc0a6b3e6cf6df36986bebe521478835d9373be3607e35156","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f7d503e0c808bbedc0a6b3e6cf6df36986bebe521478835d9373be3607e35156\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7d503e0c808bbedc0a6b3e6cf6df36986bebe521478835d9373be3607e35156","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7d503e0c808bbedc0a6b3e6cf6df36986bebe521478835d9373be3607e35156","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e66862f125201439c8779fccb2ffc631b52e9a87a0252d703162d527b04c563"} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7d503e0c808bbedc0a6b3e6cf6df36986bebe521478835d9373be3607e35156"} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c5f6acc9f2ce48f1724dfe5801e5de50f77d7e248463d6c65e951a0fc2d0bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c5f6acc9f2ce48f1724dfe5801e5de50f77d7e248463d6c65e951a0fc2d0bd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c5f6acc9f2ce48f1724dfe5801e5de50f77d7e248463d6c65e951a0fc2d0bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c5f6acc9f2ce48f1724dfe5801e5de50f77d7e248463d6c65e951a0fc2d0bd3"} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c5f6acc9f2ce48f1724dfe5801e5de50f77d7e248463d6c65e951a0fc2d0bd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c5f6acc9f2ce48f1724dfe5801e5de50f77d7e248463d6c65e951a0fc2d0bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3c5f6acc9f2ce48f1724dfe5801e5de50f77d7e248463d6c65e951a0fc2d0bd3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3c5f6acc9f2ce48f1724dfe5801e5de50f77d7e248463d6c65e951a0fc2d0bd3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c5f6acc9f2ce48f1724dfe5801e5de50f77d7e248463d6c65e951a0fc2d0bd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c5f6acc9f2ce48f1724dfe5801e5de50f77d7e248463d6c65e951a0fc2d0bd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c5f6acc9f2ce48f1724dfe5801e5de50f77d7e248463d6c65e951a0fc2d0bd3"} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c5f6acc9f2ce48f1724dfe5801e5de50f77d7e248463d6c65e951a0fc2d0bd3"} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8421e0d528296c00c577b077ec7a3c80d395a4759209594f166f58bc9616bc50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8421e0d528296c00c577b077ec7a3c80d395a4759209594f166f58bc9616bc50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8421e0d528296c00c577b077ec7a3c80d395a4759209594f166f58bc9616bc50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c5f6acc9f2ce48f1724dfe5801e5de50f77d7e248463d6c65e951a0fc2d0bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c5f6acc9f2ce48f1724dfe5801e5de50f77d7e248463d6c65e951a0fc2d0bd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8421e0d528296c00c577b077ec7a3c80d395a4759209594f166f58bc9616bc50"} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c5f6acc9f2ce48f1724dfe5801e5de50f77d7e248463d6c65e951a0fc2d0bd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8421e0d528296c00c577b077ec7a3c80d395a4759209594f166f58bc9616bc50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c5f6acc9f2ce48f1724dfe5801e5de50f77d7e248463d6c65e951a0fc2d0bd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8421e0d528296c00c577b077ec7a3c80d395a4759209594f166f58bc9616bc50"} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8421e0d528296c00c577b077ec7a3c80d395a4759209594f166f58bc9616bc50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8421e0d528296c00c577b077ec7a3c80d395a4759209594f166f58bc9616bc50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c5f6acc9f2ce48f1724dfe5801e5de50f77d7e248463d6c65e951a0fc2d0bd3"} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8421e0d528296c00c577b077ec7a3c80d395a4759209594f166f58bc9616bc50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8421e0d528296c00c577b077ec7a3c80d395a4759209594f166f58bc9616bc50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8421e0d528296c00c577b077ec7a3c80d395a4759209594f166f58bc9616bc50"} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"} {"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"754872dde5f9d6059d6da7c97085d4f5f29d0485c5596f9f14a072196e8cdfc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"754872dde5f9d6059d6da7c97085d4f5f29d0485c5596f9f14a072196e8cdfc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"754872dde5f9d6059d6da7c97085d4f5f29d0485c5596f9f14a072196e8cdfc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"754872dde5f9d6059d6da7c97085d4f5f29d0485c5596f9f14a072196e8cdfc3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/754872dde5f9d6059d6da7c97085d4f5f29d0485c5596f9f14a072196e8cdfc3"} {"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"754872dde5f9d6059d6da7c97085d4f5f29d0485c5596f9f14a072196e8cdfc3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/754872dde5f9d6059d6da7c97085d4f5f29d0485c5596f9f14a072196e8cdfc3"} {"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"754872dde5f9d6059d6da7c97085d4f5f29d0485c5596f9f14a072196e8cdfc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["754872dde5f9d6059d6da7c97085d4f5f29d0485c5596f9f14a072196e8cdfc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"754872dde5f9d6059d6da7c97085d4f5f29d0485c5596f9f14a072196e8cdfc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02b3b2fcb6e6dcaccd7e9ce65c71f0e9d5a96fdec7fefb59195c7f91bb27b52d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02b3b2fcb6e6dcaccd7e9ce65c71f0e9d5a96fdec7fefb59195c7f91bb27b52d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"754872dde5f9d6059d6da7c97085d4f5f29d0485c5596f9f14a072196e8cdfc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02b3b2fcb6e6dcaccd7e9ce65c71f0e9d5a96fdec7fefb59195c7f91bb27b52d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02b3b2fcb6e6dcaccd7e9ce65c71f0e9d5a96fdec7fefb59195c7f91bb27b52d"} {"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02b3b2fcb6e6dcaccd7e9ce65c71f0e9d5a96fdec7fefb59195c7f91bb27b52d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02b3b2fcb6e6dcaccd7e9ce65c71f0e9d5a96fdec7fefb59195c7f91bb27b52d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02b3b2fcb6e6dcaccd7e9ce65c71f0e9d5a96fdec7fefb59195c7f91bb27b52d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02b3b2fcb6e6dcaccd7e9ce65c71f0e9d5a96fdec7fefb59195c7f91bb27b52d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/754872dde5f9d6059d6da7c97085d4f5f29d0485c5596f9f14a072196e8cdfc3"} {"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02b3b2fcb6e6dcaccd7e9ce65c71f0e9d5a96fdec7fefb59195c7f91bb27b52d"} {"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"217964d7d314300b7c77786283b20a217b03157d243eab86f9b491cd9f905e64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"217964d7d314300b7c77786283b20a217b03157d243eab86f9b491cd9f905e64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"217964d7d314300b7c77786283b20a217b03157d243eab86f9b491cd9f905e64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"217964d7d314300b7c77786283b20a217b03157d243eab86f9b491cd9f905e64","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/217964d7d314300b7c77786283b20a217b03157d243eab86f9b491cd9f905e64"} {"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"217964d7d314300b7c77786283b20a217b03157d243eab86f9b491cd9f905e64","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/217964d7d314300b7c77786283b20a217b03157d243eab86f9b491cd9f905e64"} {"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"217964d7d314300b7c77786283b20a217b03157d243eab86f9b491cd9f905e64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["217964d7d314300b7c77786283b20a217b03157d243eab86f9b491cd9f905e64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"217964d7d314300b7c77786283b20a217b03157d243eab86f9b491cd9f905e64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"217964d7d314300b7c77786283b20a217b03157d243eab86f9b491cd9f905e64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/217964d7d314300b7c77786283b20a217b03157d243eab86f9b491cd9f905e64"} {"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"} {"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"} {"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7"} {"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7"} {"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7"} {"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"} {"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7"} {"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b"} {"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b"} {"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b"} {"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1"} {"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b"} {"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1"} {"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1"} {"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b"} {"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba"} {"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1"} {"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b"} {"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba"} {"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b"} {"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1"} {"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba"} {"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7"} {"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7"} {"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7"} {"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7"} {"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60e5128ca1be36b3d1d3e2819194e6e8295ed2fced0a7dca400b1bec23347d2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7"} {"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60e5128ca1be36b3d1d3e2819194e6e8295ed2fced0a7dca400b1bec23347d2a"} {"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0352dfd7793bb10611cbb5728d974f362364b047008f8c740877d1e3472cdd17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7"} {"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0352dfd7793bb10611cbb5728d974f362364b047008f8c740877d1e3472cdd17"} {"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7"} {"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"217964d7d314300b7c77786283b20a217b03157d243eab86f9b491cd9f905e64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"} {"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/217964d7d314300b7c77786283b20a217b03157d243eab86f9b491cd9f905e64"} {"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1"} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe4b41e59814b56542d18a1aa38c384b5c907c8ee6c4852f4a028de84e59ca9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe4b41e59814b56542d18a1aa38c384b5c907c8ee6c4852f4a028de84e59ca9f"} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02b3b2fcb6e6dcaccd7e9ce65c71f0e9d5a96fdec7fefb59195c7f91bb27b52d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02b3b2fcb6e6dcaccd7e9ce65c71f0e9d5a96fdec7fefb59195c7f91bb27b52d"} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7d503e0c808bbedc0a6b3e6cf6df36986bebe521478835d9373be3607e35156","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8421e0d528296c00c577b077ec7a3c80d395a4759209594f166f58bc9616bc50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7d503e0c808bbedc0a6b3e6cf6df36986bebe521478835d9373be3607e35156"} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8421e0d528296c00c577b077ec7a3c80d395a4759209594f166f58bc9616bc50"} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe"} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe"} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caa4f9b36401457f719a881eeb1f5f96aa0ea4dd38c1fbb07717262fc29788ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36c70d93efae14d85a08ac4fd3ea85ed809afa9ab5ba84848ac1060ec1d14cc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe"} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa4f9b36401457f719a881eeb1f5f96aa0ea4dd38c1fbb07717262fc29788ef"} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c18c826ffd7886328ae0cfc95adb98eb55f0e7631ed255948a1a2202aa34cde3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36c70d93efae14d85a08ac4fd3ea85ed809afa9ab5ba84848ac1060ec1d14cc5"} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"754872dde5f9d6059d6da7c97085d4f5f29d0485c5596f9f14a072196e8cdfc3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c18c826ffd7886328ae0cfc95adb98eb55f0e7631ed255948a1a2202aa34cde3"} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/754872dde5f9d6059d6da7c97085d4f5f29d0485c5596f9f14a072196e8cdfc3"} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b"} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e66862f125201439c8779fccb2ffc631b52e9a87a0252d703162d527b04c563","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e66862f125201439c8779fccb2ffc631b52e9a87a0252d703162d527b04c563"} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53be2cb11cca6fd2d7d04339911d28e690f11703a7acf6c183bcda528553969a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53be2cb11cca6fd2d7d04339911d28e690f11703a7acf6c183bcda528553969a"} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"} {"level":"debug","ts":"2026-07-14T08:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98a7ebba5212c3be299e242ec3538466c877438b6e1da04b294186489a2fadec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98a7ebba5212c3be299e242ec3538466c877438b6e1da04b294186489a2fadec"} {"level":"debug","ts":"2026-07-14T08:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c5f6acc9f2ce48f1724dfe5801e5de50f77d7e248463d6c65e951a0fc2d0bd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c5f6acc9f2ce48f1724dfe5801e5de50f77d7e248463d6c65e951a0fc2d0bd3"} {"level":"debug","ts":"2026-07-14T08:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba"} {"level":"debug","ts":"2026-07-14T08:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"927405d2c852eda21d49df175efeb4c2f8ebef2e504a7fcd3059103977385628","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T08:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/927405d2c852eda21d49df175efeb4c2f8ebef2e504a7fcd3059103977385628"} {"level":"info","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"059d2396-e816-4261-b17a-ec997258da60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37518","PortSpecifier":{"PortValue":37518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"059d2396-e816-4261-b17a-ec997258da60","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"059d2396-e816-4261-b17a-ec997258da60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37518","PortSpecifier":{"PortValue":37518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784018104,"nanos":877049215},"http":{"id":"059d2396-e816-4261-b17a-ec997258da60","method":"POST","headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"059d2396-e816-4261-b17a-ec997258da60","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"059d2396-e816-4261-b17a-ec997258da60","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"]}} {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"059d2396-e816-4261-b17a-ec997258da60","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0352dfd7793bb10611cbb5728d974f362364b047008f8c740877d1e3472cdd17"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"059d2396-e816-4261-b17a-ec997258da60","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"059d2396-e816-4261-b17a-ec997258da60","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"059d2396-e816-4261-b17a-ec997258da60","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"059d2396-e816-4261-b17a-ec997258da60","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"059d2396-e816-4261-b17a-ec997258da60","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"059d2396-e816-4261-b17a-ec997258da60","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"059d2396-e816-4261-b17a-ec997258da60","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"059d2396-e816-4261-b17a-ec997258da60","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f34de7a-adde-4e1f-b09c-42da5e78582b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48438","PortSpecifier":{"PortValue":48438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0f34de7a-adde-4e1f-b09c-42da5e78582b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f34de7a-adde-4e1f-b09c-42da5e78582b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48438","PortSpecifier":{"PortValue":48438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784018104,"nanos":925466569},"http":{"id":"0f34de7a-adde-4e1f-b09c-42da5e78582b","method":"POST","headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0f34de7a-adde-4e1f-b09c-42da5e78582b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0f34de7a-adde-4e1f-b09c-42da5e78582b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"]}} {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0f34de7a-adde-4e1f-b09c-42da5e78582b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f34de7a-adde-4e1f-b09c-42da5e78582b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f34de7a-adde-4e1f-b09c-42da5e78582b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f34de7a-adde-4e1f-b09c-42da5e78582b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b9c837/rate-test-model-b9c837\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0f34de7a-adde-4e1f-b09c-42da5e78582b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f34de7a-adde-4e1f-b09c-42da5e78582b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f34de7a-adde-4e1f-b09c-42da5e78582b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f34de7a-adde-4e1f-b09c-42da5e78582b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f34de7a-adde-4e1f-b09c-42da5e78582b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37534","PortSpecifier":{"PortValue":37534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","method":"POST","path":"/ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2/v1/completions","host":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37534","PortSpecifier":{"PortValue":37534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784018104,"nanos":975283609},"http":{"id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","method":"POST","headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JbelEr4ECo2sdDfT_bTYeHWIIU7FtuHYzUm3r2BuLTDg1Ij8Yty8EXp5xlJe"} {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JbelEr4ECo2sdDfT_bTYeHWIIU7FtuHYzUm3r2BuLTDg1Ij8Yty8EXp5xlJe\"}"} {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f35b652e-54c9-4d53-93ef-7ec71801ae00","keyName":"e2e-rate-a-408660","subscription":"e2e-rate-iso-a-408660","tenant":"e2e-shared-a-0324b2","userId":"f35b652e-54c9-4d53-93ef-7ec71801ae00","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2\",\"requestedSubscription\":\"e2e-rate-iso-a-408660\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0324b2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-408660","namespace":"ai-tenant-e2e-shared-a-0324b2","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-408660"} {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f35b652e-54c9-4d53-93ef-7ec71801ae00","keyName":"e2e-rate-a-408660","selected_subscription":"e2e-rate-iso-a-408660","selected_subscription_key":"ai-tenant-e2e-shared-a-0324b2/e2e-rate-iso-a-408660@ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0324b2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-408660","namespace":"ai-tenant-e2e-shared-a-0324b2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40962","PortSpecifier":{"PortValue":40962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b75b60a9-8817-4b12-abab-21ffa2480444","method":"POST","path":"/ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2/v1/completions","host":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40962","PortSpecifier":{"PortValue":40962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784018106,"nanos":34338703},"http":{"id":"b75b60a9-8817-4b12-abab-21ffa2480444","method":"POST","headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JbelEr4ECo2sdDfT_bTYeHWIIU7FtuHYzUm3r2BuLTDg1Ij8Yty8EXp5xlJe"} {"level":"debug","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JbelEr4ECo2sdDfT_bTYeHWIIU7FtuHYzUm3r2BuLTDg1Ij8Yty8EXp5xlJe\"}"} {"level":"debug","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f35b652e-54c9-4d53-93ef-7ec71801ae00","keyName":"e2e-rate-a-408660","subscription":"e2e-rate-iso-a-408660","tenant":"e2e-shared-a-0324b2","userId":"f35b652e-54c9-4d53-93ef-7ec71801ae00","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2\",\"requestedSubscription\":\"e2e-rate-iso-a-408660\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0324b2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-408660","namespace":"ai-tenant-e2e-shared-a-0324b2","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-408660"} {"level":"debug","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f35b652e-54c9-4d53-93ef-7ec71801ae00","keyName":"e2e-rate-a-408660","selected_subscription":"e2e-rate-iso-a-408660","selected_subscription_key":"ai-tenant-e2e-shared-a-0324b2/e2e-rate-iso-a-408660@ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0324b2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-408660","namespace":"ai-tenant-e2e-shared-a-0324b2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40964","PortSpecifier":{"PortValue":40964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8b36891a-9063-4080-a4f0-585ea49439ea","method":"POST","path":"/ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2/v1/completions","host":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40964","PortSpecifier":{"PortValue":40964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784018107,"nanos":77977540},"http":{"id":"8b36891a-9063-4080-a4f0-585ea49439ea","method":"POST","headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JbelEr4ECo2sdDfT_bTYeHWIIU7FtuHYzUm3r2BuLTDg1Ij8Yty8EXp5xlJe"} {"level":"debug","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JbelEr4ECo2sdDfT_bTYeHWIIU7FtuHYzUm3r2BuLTDg1Ij8Yty8EXp5xlJe\"}"} {"level":"debug","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f35b652e-54c9-4d53-93ef-7ec71801ae00","keyName":"e2e-rate-a-408660","subscription":"e2e-rate-iso-a-408660","tenant":"e2e-shared-a-0324b2","userId":"f35b652e-54c9-4d53-93ef-7ec71801ae00","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2\",\"requestedSubscription\":\"e2e-rate-iso-a-408660\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0324b2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-408660","namespace":"ai-tenant-e2e-shared-a-0324b2","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-408660"} {"level":"debug","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f35b652e-54c9-4d53-93ef-7ec71801ae00","keyName":"e2e-rate-a-408660","selected_subscription":"e2e-rate-iso-a-408660","selected_subscription_key":"ai-tenant-e2e-shared-a-0324b2/e2e-rate-iso-a-408660@ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0324b2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-408660","namespace":"ai-tenant-e2e-shared-a-0324b2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75c028d6-ad7e-4438-a466-04f3e04a1580","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37896","PortSpecifier":{"PortValue":37896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"75c028d6-ad7e-4438-a466-04f3e04a1580","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75c028d6-ad7e-4438-a466-04f3e04a1580","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37896","PortSpecifier":{"PortValue":37896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784018120,"nanos":101139029},"http":{"id":"75c028d6-ad7e-4438-a466-04f3e04a1580","method":"POST","headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"75c028d6-ad7e-4438-a466-04f3e04a1580","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"75c028d6-ad7e-4438-a466-04f3e04a1580","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"]}} {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"75c028d6-ad7e-4438-a466-04f3e04a1580","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0352dfd7793bb10611cbb5728d974f362364b047008f8c740877d1e3472cdd17"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75c028d6-ad7e-4438-a466-04f3e04a1580","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75c028d6-ad7e-4438-a466-04f3e04a1580","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75c028d6-ad7e-4438-a466-04f3e04a1580","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"75c028d6-ad7e-4438-a466-04f3e04a1580","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75c028d6-ad7e-4438-a466-04f3e04a1580","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75c028d6-ad7e-4438-a466-04f3e04a1580","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75c028d6-ad7e-4438-a466-04f3e04a1580","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75c028d6-ad7e-4438-a466-04f3e04a1580","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea7ff266-4b4b-498f-80b8-41ed9d29150b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57182","PortSpecifier":{"PortValue":57182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ea7ff266-4b4b-498f-80b8-41ed9d29150b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea7ff266-4b4b-498f-80b8-41ed9d29150b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57182","PortSpecifier":{"PortValue":57182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784018120,"nanos":137357499},"http":{"id":"ea7ff266-4b4b-498f-80b8-41ed9d29150b","method":"POST","headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ea7ff266-4b4b-498f-80b8-41ed9d29150b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ea7ff266-4b4b-498f-80b8-41ed9d29150b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"]}} {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ea7ff266-4b4b-498f-80b8-41ed9d29150b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea7ff266-4b4b-498f-80b8-41ed9d29150b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea7ff266-4b4b-498f-80b8-41ed9d29150b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea7ff266-4b4b-498f-80b8-41ed9d29150b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b9c837/rate-test-model-b9c837\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ea7ff266-4b4b-498f-80b8-41ed9d29150b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea7ff266-4b4b-498f-80b8-41ed9d29150b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea7ff266-4b4b-498f-80b8-41ed9d29150b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea7ff266-4b4b-498f-80b8-41ed9d29150b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea7ff266-4b4b-498f-80b8-41ed9d29150b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37908","PortSpecifier":{"PortValue":37908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4f1656fe-767c-471b-87b0-edf8446aac46","method":"POST","path":"/ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2/v1/completions","host":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37908","PortSpecifier":{"PortValue":37908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784018120,"nanos":167990165},"http":{"id":"4f1656fe-767c-471b-87b0-edf8446aac46","method":"POST","headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lyeMW19hUaHeIdmb_QDYUVIUp0RTYVZTe56nnAJiX1k0318fA9usu0RXGnoL"} {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lyeMW19hUaHeIdmb_QDYUVIUp0RTYVZTe56nnAJiX1k0318fA9usu0RXGnoL\"}"} {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dec77c0a-79be-43b5-95e8-67349507e9af","keyName":"e2e-rate-a-6d456c","subscription":"e2e-rate-iso-a-6d456c","tenant":"e2e-shared-a-0324b2","userId":"dec77c0a-79be-43b5-95e8-67349507e9af","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2\",\"requestedSubscription\":\"e2e-rate-iso-a-6d456c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0324b2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d456c","namespace":"ai-tenant-e2e-shared-a-0324b2","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6d456c"} {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dec77c0a-79be-43b5-95e8-67349507e9af","keyName":"e2e-rate-a-6d456c","selected_subscription":"e2e-rate-iso-a-6d456c","selected_subscription_key":"ai-tenant-e2e-shared-a-0324b2/e2e-rate-iso-a-6d456c@ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0324b2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d456c","namespace":"ai-tenant-e2e-shared-a-0324b2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f101b324-57e3-4547-a16a-69b295771690","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37924","PortSpecifier":{"PortValue":37924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f101b324-57e3-4547-a16a-69b295771690","method":"POST","path":"/ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2/v1/completions","host":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f101b324-57e3-4547-a16a-69b295771690","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37924","PortSpecifier":{"PortValue":37924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784018121,"nanos":206082136},"http":{"id":"f101b324-57e3-4547-a16a-69b295771690","method":"POST","headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f101b324-57e3-4547-a16a-69b295771690","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lyeMW19hUaHeIdmb_QDYUVIUp0RTYVZTe56nnAJiX1k0318fA9usu0RXGnoL"} {"level":"debug","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f101b324-57e3-4547-a16a-69b295771690","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lyeMW19hUaHeIdmb_QDYUVIUp0RTYVZTe56nnAJiX1k0318fA9usu0RXGnoL\"}"} {"level":"debug","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f101b324-57e3-4547-a16a-69b295771690","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dec77c0a-79be-43b5-95e8-67349507e9af","keyName":"e2e-rate-a-6d456c","subscription":"e2e-rate-iso-a-6d456c","tenant":"e2e-shared-a-0324b2","userId":"dec77c0a-79be-43b5-95e8-67349507e9af","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f101b324-57e3-4547-a16a-69b295771690","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2\",\"requestedSubscription\":\"e2e-rate-iso-a-6d456c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f101b324-57e3-4547-a16a-69b295771690","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0324b2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d456c","namespace":"ai-tenant-e2e-shared-a-0324b2","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f101b324-57e3-4547-a16a-69b295771690","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f101b324-57e3-4547-a16a-69b295771690","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f101b324-57e3-4547-a16a-69b295771690","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f101b324-57e3-4547-a16a-69b295771690","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f101b324-57e3-4547-a16a-69b295771690","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f101b324-57e3-4547-a16a-69b295771690","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f101b324-57e3-4547-a16a-69b295771690","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6d456c"} {"level":"debug","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f101b324-57e3-4547-a16a-69b295771690","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f101b324-57e3-4547-a16a-69b295771690","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dec77c0a-79be-43b5-95e8-67349507e9af","keyName":"e2e-rate-a-6d456c","selected_subscription":"e2e-rate-iso-a-6d456c","selected_subscription_key":"ai-tenant-e2e-shared-a-0324b2/e2e-rate-iso-a-6d456c@ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0324b2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d456c","namespace":"ai-tenant-e2e-shared-a-0324b2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f101b324-57e3-4547-a16a-69b295771690","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f101b324-57e3-4547-a16a-69b295771690","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37928","PortSpecifier":{"PortValue":37928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"73645915-075f-4bfb-b53d-399c41a63a9f","method":"POST","path":"/ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2/v1/completions","host":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37928","PortSpecifier":{"PortValue":37928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784018122,"nanos":243414456},"http":{"id":"73645915-075f-4bfb-b53d-399c41a63a9f","method":"POST","headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lyeMW19hUaHeIdmb_QDYUVIUp0RTYVZTe56nnAJiX1k0318fA9usu0RXGnoL"} {"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lyeMW19hUaHeIdmb_QDYUVIUp0RTYVZTe56nnAJiX1k0318fA9usu0RXGnoL\"}"} {"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dec77c0a-79be-43b5-95e8-67349507e9af","keyName":"e2e-rate-a-6d456c","subscription":"e2e-rate-iso-a-6d456c","tenant":"e2e-shared-a-0324b2","userId":"dec77c0a-79be-43b5-95e8-67349507e9af","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2\",\"requestedSubscription\":\"e2e-rate-iso-a-6d456c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0324b2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d456c","namespace":"ai-tenant-e2e-shared-a-0324b2","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6d456c"} {"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dec77c0a-79be-43b5-95e8-67349507e9af","keyName":"e2e-rate-a-6d456c","selected_subscription":"e2e-rate-iso-a-6d456c","selected_subscription_key":"ai-tenant-e2e-shared-a-0324b2/e2e-rate-iso-a-6d456c@ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0324b2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d456c","namespace":"ai-tenant-e2e-shared-a-0324b2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57190","PortSpecifier":{"PortValue":57190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"84516a2e-0a16-482f-9aa6-89e14388482d","method":"POST","path":"/ai-tenant-e2e-shared-b-b9c837/rate-test-model-b9c837/v1/completions","host":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57190","PortSpecifier":{"PortValue":57190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784018122,"nanos":274041960},"http":{"id":"84516a2e-0a16-482f-9aa6-89e14388482d","method":"POST","headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-b9c837/rate-test-model-b9c837/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qlcwXlkU6rM6eLRy_rH2wXaI9HmQrRaXZIOveChXDokKebVGJOAko1NP9Cg0"} {"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b9c837.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qlcwXlkU6rM6eLRy_rH2wXaI9HmQrRaXZIOveChXDokKebVGJOAko1NP9Cg0\"}"} {"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b9c837.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0389d5d7-427c-496d-b9ac-a5b820b121a3","keyName":"e2e-rate-b-6d456c","subscription":"e2e-rate-iso-b-6d456c","tenant":"e2e-shared-b-b9c837","userId":"0389d5d7-427c-496d-b9ac-a5b820b121a3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-b9c837.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-b9c837/rate-test-model-b9c837\",\"requestedSubscription\":\"e2e-rate-iso-b-6d456c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b9c837.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b9c837","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-6d456c","namespace":"ai-tenant-e2e-shared-b-b9c837","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b9c837/rate-test-model-b9c837\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-6d456c"} {"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0389d5d7-427c-496d-b9ac-a5b820b121a3","keyName":"e2e-rate-b-6d456c","selected_subscription":"e2e-rate-iso-b-6d456c","selected_subscription_key":"ai-tenant-e2e-shared-b-b9c837/e2e-rate-iso-b-6d456c@ai-tenant-e2e-shared-b-b9c837/rate-test-model-b9c837","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b9c837","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-6d456c","namespace":"ai-tenant-e2e-shared-b-b9c837","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T08:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7"} {"level":"info","ts":"2026-07-14T08:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/217964d7d314300b7c77786283b20a217b03157d243eab86f9b491cd9f905e64"} {"level":"info","ts":"2026-07-14T08:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b"} {"level":"info","ts":"2026-07-14T08:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7d503e0c808bbedc0a6b3e6cf6df36986bebe521478835d9373be3607e35156"} {"level":"info","ts":"2026-07-14T08:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"} {"level":"info","ts":"2026-07-14T08:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e66862f125201439c8779fccb2ffc631b52e9a87a0252d703162d527b04c563"} {"level":"info","ts":"2026-07-14T08:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"} {"level":"info","ts":"2026-07-14T08:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8421e0d528296c00c577b077ec7a3c80d395a4759209594f166f58bc9616bc50"} {"level":"info","ts":"2026-07-14T08:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c5f6acc9f2ce48f1724dfe5801e5de50f77d7e248463d6c65e951a0fc2d0bd3"} {"level":"info","ts":"2026-07-14T08:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/caa4f9b36401457f719a881eeb1f5f96aa0ea4dd38c1fbb07717262fc29788ef"} {"level":"info","ts":"2026-07-14T08:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/754872dde5f9d6059d6da7c97085d4f5f29d0485c5596f9f14a072196e8cdfc3"} {"level":"info","ts":"2026-07-14T08:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60e5128ca1be36b3d1d3e2819194e6e8295ed2fced0a7dca400b1bec23347d2a"} {"level":"info","ts":"2026-07-14T08:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/927405d2c852eda21d49df175efeb4c2f8ebef2e504a7fcd3059103977385628"} {"level":"info","ts":"2026-07-14T08:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02b3b2fcb6e6dcaccd7e9ce65c71f0e9d5a96fdec7fefb59195c7f91bb27b52d"} {"level":"info","ts":"2026-07-14T08:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1"} {"level":"info","ts":"2026-07-14T08:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba"} {"level":"info","ts":"2026-07-14T08:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98a7ebba5212c3be299e242ec3538466c877438b6e1da04b294186489a2fadec"} {"level":"info","ts":"2026-07-14T08:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe"} {"level":"info","ts":"2026-07-14T08:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0352dfd7793bb10611cbb5728d974f362364b047008f8c740877d1e3472cdd17"} {"level":"info","ts":"2026-07-14T08:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe4b41e59814b56542d18a1aa38c384b5c907c8ee6c4852f4a028de84e59ca9f"} {"level":"info","ts":"2026-07-14T08:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"} {"level":"info","ts":"2026-07-14T08:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36c70d93efae14d85a08ac4fd3ea85ed809afa9ab5ba84848ac1060ec1d14cc5"} {"level":"info","ts":"2026-07-14T08:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53be2cb11cca6fd2d7d04339911d28e690f11703a7acf6c183bcda528553969a"} {"level":"info","ts":"2026-07-14T08:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c18c826ffd7886328ae0cfc95adb98eb55f0e7631ed255948a1a2202aa34cde3"}