--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756"} {"level":"info","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756"} {"level":"error","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756"} {"level":"debug","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756"} {"level":"debug","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756"} {"level":"debug","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756"} {"level":"debug","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756"} {"level":"debug","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756"} {"level":"debug","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f105a23c05d957e1a79ba56f8a1e7ac71d6a47156ce2dfba8ee1733cb46fdbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f105a23c05d957e1a79ba56f8a1e7ac71d6a47156ce2dfba8ee1733cb46fdbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f105a23c05d957e1a79ba56f8a1e7ac71d6a47156ce2dfba8ee1733cb46fdbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f105a23c05d957e1a79ba56f8a1e7ac71d6a47156ce2dfba8ee1733cb46fdbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f105a23c05d957e1a79ba56f8a1e7ac71d6a47156ce2dfba8ee1733cb46fdbd"} {"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f105a23c05d957e1a79ba56f8a1e7ac71d6a47156ce2dfba8ee1733cb46fdbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f105a23c05d957e1a79ba56f8a1e7ac71d6a47156ce2dfba8ee1733cb46fdbd"} {"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f105a23c05d957e1a79ba56f8a1e7ac71d6a47156ce2dfba8ee1733cb46fdbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f105a23c05d957e1a79ba56f8a1e7ac71d6a47156ce2dfba8ee1733cb46fdbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f105a23c05d957e1a79ba56f8a1e7ac71d6a47156ce2dfba8ee1733cb46fdbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f105a23c05d957e1a79ba56f8a1e7ac71d6a47156ce2dfba8ee1733cb46fdbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f105a23c05d957e1a79ba56f8a1e7ac71d6a47156ce2dfba8ee1733cb46fdbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ae963983fb25e5d00d91a0ff9821fe3ff919534f64359f5a9eeff670404084a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f105a23c05d957e1a79ba56f8a1e7ac71d6a47156ce2dfba8ee1733cb46fdbd"} {"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ae963983fb25e5d00d91a0ff9821fe3ff919534f64359f5a9eeff670404084a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f105a23c05d957e1a79ba56f8a1e7ac71d6a47156ce2dfba8ee1733cb46fdbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f105a23c05d957e1a79ba56f8a1e7ac71d6a47156ce2dfba8ee1733cb46fdbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ae963983fb25e5d00d91a0ff9821fe3ff919534f64359f5a9eeff670404084a"} {"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f105a23c05d957e1a79ba56f8a1e7ac71d6a47156ce2dfba8ee1733cb46fdbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ae963983fb25e5d00d91a0ff9821fe3ff919534f64359f5a9eeff670404084a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ae963983fb25e5d00d91a0ff9821fe3ff919534f64359f5a9eeff670404084a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f105a23c05d957e1a79ba56f8a1e7ac71d6a47156ce2dfba8ee1733cb46fdbd"} {"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ae963983fb25e5d00d91a0ff9821fe3ff919534f64359f5a9eeff670404084a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f105a23c05d957e1a79ba56f8a1e7ac71d6a47156ce2dfba8ee1733cb46fdbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ae963983fb25e5d00d91a0ff9821fe3ff919534f64359f5a9eeff670404084a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ae963983fb25e5d00d91a0ff9821fe3ff919534f64359f5a9eeff670404084a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ae963983fb25e5d00d91a0ff9821fe3ff919534f64359f5a9eeff670404084a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ae963983fb25e5d00d91a0ff9821fe3ff919534f64359f5a9eeff670404084a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ae963983fb25e5d00d91a0ff9821fe3ff919534f64359f5a9eeff670404084a"} {"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ae963983fb25e5d00d91a0ff9821fe3ff919534f64359f5a9eeff670404084a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ae963983fb25e5d00d91a0ff9821fe3ff919534f64359f5a9eeff670404084a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ae963983fb25e5d00d91a0ff9821fe3ff919534f64359f5a9eeff670404084a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ae963983fb25e5d00d91a0ff9821fe3ff919534f64359f5a9eeff670404084a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f105a23c05d957e1a79ba56f8a1e7ac71d6a47156ce2dfba8ee1733cb46fdbd"} {"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895"} {"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ae963983fb25e5d00d91a0ff9821fe3ff919534f64359f5a9eeff670404084a"} {"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895"} {"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895"} {"level":"error","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895"} {"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895"} {"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895"} {"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895"} {"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895"} {"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895"} {"level":"info","ts":"2026-07-07T00:29:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/155a6d79f2c037bcfd664144c4887bb81dbda9422412517ecac720c2e095ff62"} {"level":"info","ts":"2026-07-07T00:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d438b8ec885ed61384ee274e496018698a91722745fb1c8cd4ff19d6c923257"} {"level":"info","ts":"2026-07-07T00:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b780182d6da67e830212d78c9ebcfa2c145383f5bf68d518470af17742ab0426"} {"level":"info","ts":"2026-07-07T00:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/512147d34e2b05e2f7b8761ce23f6979ec913ea20545f98d758bc92fe01b7ed6"} {"level":"info","ts":"2026-07-07T00:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3405306b92887bc43bc15b80fed52b794adcc1635d6c7edca7962de83e53895"} {"level":"info","ts":"2026-07-07T00:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ae963983fb25e5d00d91a0ff9821fe3ff919534f64359f5a9eeff670404084a"} {"level":"info","ts":"2026-07-07T00:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f105a23c05d957e1a79ba56f8a1e7ac71d6a47156ce2dfba8ee1733cb46fdbd"} {"level":"info","ts":"2026-07-07T00:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ef022974ca09ff0e5bbda93031b956fcf49155a1378fa857b0c6b3bda787756"} {"level":"debug","ts":"2026-07-07T00:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52a505e002447aeb72942c7741f24f370f43033ecbebdc3d72ebd004c96fb72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52a505e002447aeb72942c7741f24f370f43033ecbebdc3d72ebd004c96fb72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b52a505e002447aeb72942c7741f24f370f43033ecbebdc3d72ebd004c96fb72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b52a505e002447aeb72942c7741f24f370f43033ecbebdc3d72ebd004c96fb72","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b52a505e002447aeb72942c7741f24f370f43033ecbebdc3d72ebd004c96fb72"} {"level":"debug","ts":"2026-07-07T00:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b52a505e002447aeb72942c7741f24f370f43033ecbebdc3d72ebd004c96fb72","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b52a505e002447aeb72942c7741f24f370f43033ecbebdc3d72ebd004c96fb72"} {"level":"debug","ts":"2026-07-07T00:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52a505e002447aeb72942c7741f24f370f43033ecbebdc3d72ebd004c96fb72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b52a505e002447aeb72942c7741f24f370f43033ecbebdc3d72ebd004c96fb72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52a505e002447aeb72942c7741f24f370f43033ecbebdc3d72ebd004c96fb72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52a505e002447aeb72942c7741f24f370f43033ecbebdc3d72ebd004c96fb72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52a505e002447aeb72942c7741f24f370f43033ecbebdc3d72ebd004c96fb72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b52a505e002447aeb72942c7741f24f370f43033ecbebdc3d72ebd004c96fb72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b52a505e002447aeb72942c7741f24f370f43033ecbebdc3d72ebd004c96fb72","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b52a505e002447aeb72942c7741f24f370f43033ecbebdc3d72ebd004c96fb72"} {"level":"debug","ts":"2026-07-07T00:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b52a505e002447aeb72942c7741f24f370f43033ecbebdc3d72ebd004c96fb72","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b52a505e002447aeb72942c7741f24f370f43033ecbebdc3d72ebd004c96fb72"} {"level":"debug","ts":"2026-07-07T00:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52a505e002447aeb72942c7741f24f370f43033ecbebdc3d72ebd004c96fb72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b52a505e002447aeb72942c7741f24f370f43033ecbebdc3d72ebd004c96fb72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52a505e002447aeb72942c7741f24f370f43033ecbebdc3d72ebd004c96fb72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b52a505e002447aeb72942c7741f24f370f43033ecbebdc3d72ebd004c96fb72","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b52a505e002447aeb72942c7741f24f370f43033ecbebdc3d72ebd004c96fb72"} {"level":"debug","ts":"2026-07-07T00:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14aedfa6d260504741740f61150e6b6ef6ed48fa5c50e3cd67939ec6900e48d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14aedfa6d260504741740f61150e6b6ef6ed48fa5c50e3cd67939ec6900e48d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14aedfa6d260504741740f61150e6b6ef6ed48fa5c50e3cd67939ec6900e48d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14aedfa6d260504741740f61150e6b6ef6ed48fa5c50e3cd67939ec6900e48d1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14aedfa6d260504741740f61150e6b6ef6ed48fa5c50e3cd67939ec6900e48d1"} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14aedfa6d260504741740f61150e6b6ef6ed48fa5c50e3cd67939ec6900e48d1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14aedfa6d260504741740f61150e6b6ef6ed48fa5c50e3cd67939ec6900e48d1"} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14aedfa6d260504741740f61150e6b6ef6ed48fa5c50e3cd67939ec6900e48d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14aedfa6d260504741740f61150e6b6ef6ed48fa5c50e3cd67939ec6900e48d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14aedfa6d260504741740f61150e6b6ef6ed48fa5c50e3cd67939ec6900e48d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14aedfa6d260504741740f61150e6b6ef6ed48fa5c50e3cd67939ec6900e48d1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14aedfa6d260504741740f61150e6b6ef6ed48fa5c50e3cd67939ec6900e48d1"} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5526b2b82f9b47aea5fb2d1257fa699e91c92012b3a27efb96b3cc8c07fb110","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5526b2b82f9b47aea5fb2d1257fa699e91c92012b3a27efb96b3cc8c07fb110","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5526b2b82f9b47aea5fb2d1257fa699e91c92012b3a27efb96b3cc8c07fb110","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5526b2b82f9b47aea5fb2d1257fa699e91c92012b3a27efb96b3cc8c07fb110"} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5526b2b82f9b47aea5fb2d1257fa699e91c92012b3a27efb96b3cc8c07fb110","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5526b2b82f9b47aea5fb2d1257fa699e91c92012b3a27efb96b3cc8c07fb110","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f5526b2b82f9b47aea5fb2d1257fa699e91c92012b3a27efb96b3cc8c07fb110","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f5526b2b82f9b47aea5fb2d1257fa699e91c92012b3a27efb96b3cc8c07fb110\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5526b2b82f9b47aea5fb2d1257fa699e91c92012b3a27efb96b3cc8c07fb110","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5526b2b82f9b47aea5fb2d1257fa699e91c92012b3a27efb96b3cc8c07fb110","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5526b2b82f9b47aea5fb2d1257fa699e91c92012b3a27efb96b3cc8c07fb110"} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5526b2b82f9b47aea5fb2d1257fa699e91c92012b3a27efb96b3cc8c07fb110"} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"005ecadee0fc256e56c08ac1a11f351ff189685ddca6a4d8669cbeb6c3202c6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"005ecadee0fc256e56c08ac1a11f351ff189685ddca6a4d8669cbeb6c3202c6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb2c2e3f95df23b497b0145766a8d914a930ba4422bc942b202c3b28f32ce1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/005ecadee0fc256e56c08ac1a11f351ff189685ddca6a4d8669cbeb6c3202c6e"} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb2c2e3f95df23b497b0145766a8d914a930ba4422bc942b202c3b28f32ce1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"005ecadee0fc256e56c08ac1a11f351ff189685ddca6a4d8669cbeb6c3202c6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["005ecadee0fc256e56c08ac1a11f351ff189685ddca6a4d8669cbeb6c3202c6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"005ecadee0fc256e56c08ac1a11f351ff189685ddca6a4d8669cbeb6c3202c6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5526b2b82f9b47aea5fb2d1257fa699e91c92012b3a27efb96b3cc8c07fb110","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5526b2b82f9b47aea5fb2d1257fa699e91c92012b3a27efb96b3cc8c07fb110"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb2c2e3f95df23b497b0145766a8d914a930ba4422bc942b202c3b28f32ce1a4"} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5526b2b82f9b47aea5fb2d1257fa699e91c92012b3a27efb96b3cc8c07fb110","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75900b16015700e044df79e70049afb826c08e31dca9ca8ebeae98a9ebcbe31e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/005ecadee0fc256e56c08ac1a11f351ff189685ddca6a4d8669cbeb6c3202c6e"} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75900b16015700e044df79e70049afb826c08e31dca9ca8ebeae98a9ebcbe31e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb2c2e3f95df23b497b0145766a8d914a930ba4422bc942b202c3b28f32ce1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb2c2e3f95df23b497b0145766a8d914a930ba4422bc942b202c3b28f32ce1a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb2c2e3f95df23b497b0145766a8d914a930ba4422bc942b202c3b28f32ce1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"005ecadee0fc256e56c08ac1a11f351ff189685ddca6a4d8669cbeb6c3202c6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5526b2b82f9b47aea5fb2d1257fa699e91c92012b3a27efb96b3cc8c07fb110","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75900b16015700e044df79e70049afb826c08e31dca9ca8ebeae98a9ebcbe31e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75900b16015700e044df79e70049afb826c08e31dca9ca8ebeae98a9ebcbe31e"} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75900b16015700e044df79e70049afb826c08e31dca9ca8ebeae98a9ebcbe31e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb2c2e3f95df23b497b0145766a8d914a930ba4422bc942b202c3b28f32ce1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb2c2e3f95df23b497b0145766a8d914a930ba4422bc942b202c3b28f32ce1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75900b16015700e044df79e70049afb826c08e31dca9ca8ebeae98a9ebcbe31e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75900b16015700e044df79e70049afb826c08e31dca9ca8ebeae98a9ebcbe31e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb2c2e3f95df23b497b0145766a8d914a930ba4422bc942b202c3b28f32ce1a4"} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75900b16015700e044df79e70049afb826c08e31dca9ca8ebeae98a9ebcbe31e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb2c2e3f95df23b497b0145766a8d914a930ba4422bc942b202c3b28f32ce1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb2c2e3f95df23b497b0145766a8d914a930ba4422bc942b202c3b28f32ce1a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb2c2e3f95df23b497b0145766a8d914a930ba4422bc942b202c3b28f32ce1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aa4b9ed184b11a57a4d7e17915e821113a8ae830af9bf8332e637dcc74f1af8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5526b2b82f9b47aea5fb2d1257fa699e91c92012b3a27efb96b3cc8c07fb110"} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aa4b9ed184b11a57a4d7e17915e821113a8ae830af9bf8332e637dcc74f1af8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75900b16015700e044df79e70049afb826c08e31dca9ca8ebeae98a9ebcbe31e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75900b16015700e044df79e70049afb826c08e31dca9ca8ebeae98a9ebcbe31e"} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75900b16015700e044df79e70049afb826c08e31dca9ca8ebeae98a9ebcbe31e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb2c2e3f95df23b497b0145766a8d914a930ba4422bc942b202c3b28f32ce1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb2c2e3f95df23b497b0145766a8d914a930ba4422bc942b202c3b28f32ce1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5aa4b9ed184b11a57a4d7e17915e821113a8ae830af9bf8332e637dcc74f1af8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75900b16015700e044df79e70049afb826c08e31dca9ca8ebeae98a9ebcbe31e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75900b16015700e044df79e70049afb826c08e31dca9ca8ebeae98a9ebcbe31e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb2c2e3f95df23b497b0145766a8d914a930ba4422bc942b202c3b28f32ce1a4"} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75900b16015700e044df79e70049afb826c08e31dca9ca8ebeae98a9ebcbe31e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb2c2e3f95df23b497b0145766a8d914a930ba4422bc942b202c3b28f32ce1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb2c2e3f95df23b497b0145766a8d914a930ba4422bc942b202c3b28f32ce1a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aa4b9ed184b11a57a4d7e17915e821113a8ae830af9bf8332e637dcc74f1af8"} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb2c2e3f95df23b497b0145766a8d914a930ba4422bc942b202c3b28f32ce1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aa4b9ed184b11a57a4d7e17915e821113a8ae830af9bf8332e637dcc74f1af8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5aa4b9ed184b11a57a4d7e17915e821113a8ae830af9bf8332e637dcc74f1af8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aa4b9ed184b11a57a4d7e17915e821113a8ae830af9bf8332e637dcc74f1af8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75900b16015700e044df79e70049afb826c08e31dca9ca8ebeae98a9ebcbe31e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75900b16015700e044df79e70049afb826c08e31dca9ca8ebeae98a9ebcbe31e"} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75900b16015700e044df79e70049afb826c08e31dca9ca8ebeae98a9ebcbe31e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb2c2e3f95df23b497b0145766a8d914a930ba4422bc942b202c3b28f32ce1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb2c2e3f95df23b497b0145766a8d914a930ba4422bc942b202c3b28f32ce1a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb2c2e3f95df23b497b0145766a8d914a930ba4422bc942b202c3b28f32ce1a4"} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aa4b9ed184b11a57a4d7e17915e821113a8ae830af9bf8332e637dcc74f1af8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aa4b9ed184b11a57a4d7e17915e821113a8ae830af9bf8332e637dcc74f1af8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75900b16015700e044df79e70049afb826c08e31dca9ca8ebeae98a9ebcbe31e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75900b16015700e044df79e70049afb826c08e31dca9ca8ebeae98a9ebcbe31e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75900b16015700e044df79e70049afb826c08e31dca9ca8ebeae98a9ebcbe31e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb2c2e3f95df23b497b0145766a8d914a930ba4422bc942b202c3b28f32ce1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb2c2e3f95df23b497b0145766a8d914a930ba4422bc942b202c3b28f32ce1a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aa4b9ed184b11a57a4d7e17915e821113a8ae830af9bf8332e637dcc74f1af8"} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb2c2e3f95df23b497b0145766a8d914a930ba4422bc942b202c3b28f32ce1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aa4b9ed184b11a57a4d7e17915e821113a8ae830af9bf8332e637dcc74f1af8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5aa4b9ed184b11a57a4d7e17915e821113a8ae830af9bf8332e637dcc74f1af8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aa4b9ed184b11a57a4d7e17915e821113a8ae830af9bf8332e637dcc74f1af8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75900b16015700e044df79e70049afb826c08e31dca9ca8ebeae98a9ebcbe31e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75900b16015700e044df79e70049afb826c08e31dca9ca8ebeae98a9ebcbe31e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb2c2e3f95df23b497b0145766a8d914a930ba4422bc942b202c3b28f32ce1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5aa4b9ed184b11a57a4d7e17915e821113a8ae830af9bf8332e637dcc74f1af8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6561ae2232d5ae9b6d64b10c52eb289e61c90f40a460f287419b0246d27d1cdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75900b16015700e044df79e70049afb826c08e31dca9ca8ebeae98a9ebcbe31e"} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6561ae2232d5ae9b6d64b10c52eb289e61c90f40a460f287419b0246d27d1cdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75900b16015700e044df79e70049afb826c08e31dca9ca8ebeae98a9ebcbe31e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75900b16015700e044df79e70049afb826c08e31dca9ca8ebeae98a9ebcbe31e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75900b16015700e044df79e70049afb826c08e31dca9ca8ebeae98a9ebcbe31e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6561ae2232d5ae9b6d64b10c52eb289e61c90f40a460f287419b0246d27d1cdd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb2c2e3f95df23b497b0145766a8d914a930ba4422bc942b202c3b28f32ce1a4"} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75900b16015700e044df79e70049afb826c08e31dca9ca8ebeae98a9ebcbe31e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6561ae2232d5ae9b6d64b10c52eb289e61c90f40a460f287419b0246d27d1cdd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aa4b9ed184b11a57a4d7e17915e821113a8ae830af9bf8332e637dcc74f1af8"} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6561ae2232d5ae9b6d64b10c52eb289e61c90f40a460f287419b0246d27d1cdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6561ae2232d5ae9b6d64b10c52eb289e61c90f40a460f287419b0246d27d1cdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6561ae2232d5ae9b6d64b10c52eb289e61c90f40a460f287419b0246d27d1cdd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6561ae2232d5ae9b6d64b10c52eb289e61c90f40a460f287419b0246d27d1cdd"} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fb77517fee7d660fd923d72eec388ee1382231ece0d2436d06255e6a9f4e604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75900b16015700e044df79e70049afb826c08e31dca9ca8ebeae98a9ebcbe31e"} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fb77517fee7d660fd923d72eec388ee1382231ece0d2436d06255e6a9f4e604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fb77517fee7d660fd923d72eec388ee1382231ece0d2436d06255e6a9f4e604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fb77517fee7d660fd923d72eec388ee1382231ece0d2436d06255e6a9f4e604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6561ae2232d5ae9b6d64b10c52eb289e61c90f40a460f287419b0246d27d1cdd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6561ae2232d5ae9b6d64b10c52eb289e61c90f40a460f287419b0246d27d1cdd"} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fb77517fee7d660fd923d72eec388ee1382231ece0d2436d06255e6a9f4e604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fb77517fee7d660fd923d72eec388ee1382231ece0d2436d06255e6a9f4e604"} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fb77517fee7d660fd923d72eec388ee1382231ece0d2436d06255e6a9f4e604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fb77517fee7d660fd923d72eec388ee1382231ece0d2436d06255e6a9f4e604","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fb77517fee7d660fd923d72eec388ee1382231ece0d2436d06255e6a9f4e604"} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fb77517fee7d660fd923d72eec388ee1382231ece0d2436d06255e6a9f4e604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fb77517fee7d660fd923d72eec388ee1382231ece0d2436d06255e6a9f4e604"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fb77517fee7d660fd923d72eec388ee1382231ece0d2436d06255e6a9f4e604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cab1553daacd98d43c7c48dc1c667e13f6cfa77e220f8dd17a46d1ed4441f19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cab1553daacd98d43c7c48dc1c667e13f6cfa77e220f8dd17a46d1ed4441f19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fb77517fee7d660fd923d72eec388ee1382231ece0d2436d06255e6a9f4e604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fee13a7bca2d7603c5e04c83278a121b90ae7c1d91bd3ff6d963bb4cd5b093cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cab1553daacd98d43c7c48dc1c667e13f6cfa77e220f8dd17a46d1ed4441f19"} {"level":"info","ts":"2026-07-07T00:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fee13a7bca2d7603c5e04c83278a121b90ae7c1d91bd3ff6d963bb4cd5b093cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cab1553daacd98d43c7c48dc1c667e13f6cfa77e220f8dd17a46d1ed4441f19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cab1553daacd98d43c7c48dc1c667e13f6cfa77e220f8dd17a46d1ed4441f19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cab1553daacd98d43c7c48dc1c667e13f6cfa77e220f8dd17a46d1ed4441f19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fee13a7bca2d7603c5e04c83278a121b90ae7c1d91bd3ff6d963bb4cd5b093cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cab1553daacd98d43c7c48dc1c667e13f6cfa77e220f8dd17a46d1ed4441f19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fb77517fee7d660fd923d72eec388ee1382231ece0d2436d06255e6a9f4e604"} {"level":"debug","ts":"2026-07-07T00:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fee13a7bca2d7603c5e04c83278a121b90ae7c1d91bd3ff6d963bb4cd5b093cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fee13a7bca2d7603c5e04c83278a121b90ae7c1d91bd3ff6d963bb4cd5b093cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fee13a7bca2d7603c5e04c83278a121b90ae7c1d91bd3ff6d963bb4cd5b093cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fee13a7bca2d7603c5e04c83278a121b90ae7c1d91bd3ff6d963bb4cd5b093cb"} {"level":"debug","ts":"2026-07-07T00:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6561ae2232d5ae9b6d64b10c52eb289e61c90f40a460f287419b0246d27d1cdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6561ae2232d5ae9b6d64b10c52eb289e61c90f40a460f287419b0246d27d1cdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6561ae2232d5ae9b6d64b10c52eb289e61c90f40a460f287419b0246d27d1cdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fee13a7bca2d7603c5e04c83278a121b90ae7c1d91bd3ff6d963bb4cd5b093cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fee13a7bca2d7603c5e04c83278a121b90ae7c1d91bd3ff6d963bb4cd5b093cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cab1553daacd98d43c7c48dc1c667e13f6cfa77e220f8dd17a46d1ed4441f19"} {"level":"info","ts":"2026-07-07T00:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fee13a7bca2d7603c5e04c83278a121b90ae7c1d91bd3ff6d963bb4cd5b093cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4646993966ae5af538787f1e177cdaa447217625e0ccff3c76d8cc8c72d000a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fee13a7bca2d7603c5e04c83278a121b90ae7c1d91bd3ff6d963bb4cd5b093cb"} {"level":"info","ts":"2026-07-07T00:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4646993966ae5af538787f1e177cdaa447217625e0ccff3c76d8cc8c72d000a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6561ae2232d5ae9b6d64b10c52eb289e61c90f40a460f287419b0246d27d1cdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fee13a7bca2d7603c5e04c83278a121b90ae7c1d91bd3ff6d963bb4cd5b093cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4646993966ae5af538787f1e177cdaa447217625e0ccff3c76d8cc8c72d000a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4646993966ae5af538787f1e177cdaa447217625e0ccff3c76d8cc8c72d000a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4646993966ae5af538787f1e177cdaa447217625e0ccff3c76d8cc8c72d000a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4646993966ae5af538787f1e177cdaa447217625e0ccff3c76d8cc8c72d000a"} {"level":"error","ts":"2026-07-07T00:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e4646993966ae5af538787f1e177cdaa447217625e0ccff3c76d8cc8c72d000a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e4646993966ae5af538787f1e177cdaa447217625e0ccff3c76d8cc8c72d000a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T00:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4646993966ae5af538787f1e177cdaa447217625e0ccff3c76d8cc8c72d000a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4646993966ae5af538787f1e177cdaa447217625e0ccff3c76d8cc8c72d000a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4646993966ae5af538787f1e177cdaa447217625e0ccff3c76d8cc8c72d000a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4646993966ae5af538787f1e177cdaa447217625e0ccff3c76d8cc8c72d000a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4646993966ae5af538787f1e177cdaa447217625e0ccff3c76d8cc8c72d000a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6561ae2232d5ae9b6d64b10c52eb289e61c90f40a460f287419b0246d27d1cdd"} {"level":"error","ts":"2026-07-07T00:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e4646993966ae5af538787f1e177cdaa447217625e0ccff3c76d8cc8c72d000a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e4646993966ae5af538787f1e177cdaa447217625e0ccff3c76d8cc8c72d000a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T00:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4646993966ae5af538787f1e177cdaa447217625e0ccff3c76d8cc8c72d000a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4646993966ae5af538787f1e177cdaa447217625e0ccff3c76d8cc8c72d000a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fee13a7bca2d7603c5e04c83278a121b90ae7c1d91bd3ff6d963bb4cd5b093cb"} {"level":"info","ts":"2026-07-07T00:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4646993966ae5af538787f1e177cdaa447217625e0ccff3c76d8cc8c72d000a"} {"level":"debug","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfd94f302cd531dbdb2d92ef824279ac78369713d78cf6c4fdcff0f4235ce6d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfd94f302cd531dbdb2d92ef824279ac78369713d78cf6c4fdcff0f4235ce6d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfd94f302cd531dbdb2d92ef824279ac78369713d78cf6c4fdcff0f4235ce6d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfd94f302cd531dbdb2d92ef824279ac78369713d78cf6c4fdcff0f4235ce6d6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfd94f302cd531dbdb2d92ef824279ac78369713d78cf6c4fdcff0f4235ce6d6"} {"level":"debug","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfd94f302cd531dbdb2d92ef824279ac78369713d78cf6c4fdcff0f4235ce6d6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfd94f302cd531dbdb2d92ef824279ac78369713d78cf6c4fdcff0f4235ce6d6"} {"level":"debug","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfd94f302cd531dbdb2d92ef824279ac78369713d78cf6c4fdcff0f4235ce6d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfd94f302cd531dbdb2d92ef824279ac78369713d78cf6c4fdcff0f4235ce6d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfd94f302cd531dbdb2d92ef824279ac78369713d78cf6c4fdcff0f4235ce6d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfd94f302cd531dbdb2d92ef824279ac78369713d78cf6c4fdcff0f4235ce6d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfd94f302cd531dbdb2d92ef824279ac78369713d78cf6c4fdcff0f4235ce6d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfd94f302cd531dbdb2d92ef824279ac78369713d78cf6c4fdcff0f4235ce6d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfd94f302cd531dbdb2d92ef824279ac78369713d78cf6c4fdcff0f4235ce6d6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfd94f302cd531dbdb2d92ef824279ac78369713d78cf6c4fdcff0f4235ce6d6"} {"level":"debug","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfd94f302cd531dbdb2d92ef824279ac78369713d78cf6c4fdcff0f4235ce6d6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfd94f302cd531dbdb2d92ef824279ac78369713d78cf6c4fdcff0f4235ce6d6"} {"level":"debug","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfd94f302cd531dbdb2d92ef824279ac78369713d78cf6c4fdcff0f4235ce6d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfd94f302cd531dbdb2d92ef824279ac78369713d78cf6c4fdcff0f4235ce6d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfd94f302cd531dbdb2d92ef824279ac78369713d78cf6c4fdcff0f4235ce6d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfd94f302cd531dbdb2d92ef824279ac78369713d78cf6c4fdcff0f4235ce6d6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfd94f302cd531dbdb2d92ef824279ac78369713d78cf6c4fdcff0f4235ce6d6"} {"level":"debug","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8604172cd368cd8e58ea892313231932fa09324f17e9a752eb17d33b8fba828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8604172cd368cd8e58ea892313231932fa09324f17e9a752eb17d33b8fba828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8604172cd368cd8e58ea892313231932fa09324f17e9a752eb17d33b8fba828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8604172cd368cd8e58ea892313231932fa09324f17e9a752eb17d33b8fba828"} {"level":"info","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8604172cd368cd8e58ea892313231932fa09324f17e9a752eb17d33b8fba828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8604172cd368cd8e58ea892313231932fa09324f17e9a752eb17d33b8fba828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e8604172cd368cd8e58ea892313231932fa09324f17e9a752eb17d33b8fba828","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e8604172cd368cd8e58ea892313231932fa09324f17e9a752eb17d33b8fba828\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8604172cd368cd8e58ea892313231932fa09324f17e9a752eb17d33b8fba828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8604172cd368cd8e58ea892313231932fa09324f17e9a752eb17d33b8fba828","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8604172cd368cd8e58ea892313231932fa09324f17e9a752eb17d33b8fba828"} {"level":"info","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8604172cd368cd8e58ea892313231932fa09324f17e9a752eb17d33b8fba828"} {"level":"debug","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8604172cd368cd8e58ea892313231932fa09324f17e9a752eb17d33b8fba828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8604172cd368cd8e58ea892313231932fa09324f17e9a752eb17d33b8fba828"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8604172cd368cd8e58ea892313231932fa09324f17e9a752eb17d33b8fba828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8604172cd368cd8e58ea892313231932fa09324f17e9a752eb17d33b8fba828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8604172cd368cd8e58ea892313231932fa09324f17e9a752eb17d33b8fba828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8604172cd368cd8e58ea892313231932fa09324f17e9a752eb17d33b8fba828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8604172cd368cd8e58ea892313231932fa09324f17e9a752eb17d33b8fba828","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8604172cd368cd8e58ea892313231932fa09324f17e9a752eb17d33b8fba828"} {"level":"debug","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8604172cd368cd8e58ea892313231932fa09324f17e9a752eb17d33b8fba828","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8604172cd368cd8e58ea892313231932fa09324f17e9a752eb17d33b8fba828"} {"level":"debug","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16c7d0333743fb798d45248cbd92bc41320fed1b9cc6e5e768cb7137d1635f48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16c7d0333743fb798d45248cbd92bc41320fed1b9cc6e5e768cb7137d1635f48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8604172cd368cd8e58ea892313231932fa09324f17e9a752eb17d33b8fba828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8604172cd368cd8e58ea892313231932fa09324f17e9a752eb17d33b8fba828"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16c7d0333743fb798d45248cbd92bc41320fed1b9cc6e5e768cb7137d1635f48"} {"level":"info","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8604172cd368cd8e58ea892313231932fa09324f17e9a752eb17d33b8fba828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16c7d0333743fb798d45248cbd92bc41320fed1b9cc6e5e768cb7137d1635f48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8604172cd368cd8e58ea892313231932fa09324f17e9a752eb17d33b8fba828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16c7d0333743fb798d45248cbd92bc41320fed1b9cc6e5e768cb7137d1635f48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16c7d0333743fb798d45248cbd92bc41320fed1b9cc6e5e768cb7137d1635f48"} {"level":"debug","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16c7d0333743fb798d45248cbd92bc41320fed1b9cc6e5e768cb7137d1635f48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16c7d0333743fb798d45248cbd92bc41320fed1b9cc6e5e768cb7137d1635f48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8604172cd368cd8e58ea892313231932fa09324f17e9a752eb17d33b8fba828"} {"level":"info","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16c7d0333743fb798d45248cbd92bc41320fed1b9cc6e5e768cb7137d1635f48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16c7d0333743fb798d45248cbd92bc41320fed1b9cc6e5e768cb7137d1635f48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16c7d0333743fb798d45248cbd92bc41320fed1b9cc6e5e768cb7137d1635f48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16c7d0333743fb798d45248cbd92bc41320fed1b9cc6e5e768cb7137d1635f48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16c7d0333743fb798d45248cbd92bc41320fed1b9cc6e5e768cb7137d1635f48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16c7d0333743fb798d45248cbd92bc41320fed1b9cc6e5e768cb7137d1635f48"} {"level":"debug","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08fd1fa3fb75427e25787b6e75cdca37458869fb60f85cea669e4413fb524d08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08fd1fa3fb75427e25787b6e75cdca37458869fb60f85cea669e4413fb524d08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16c7d0333743fb798d45248cbd92bc41320fed1b9cc6e5e768cb7137d1635f48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08fd1fa3fb75427e25787b6e75cdca37458869fb60f85cea669e4413fb524d08","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16c7d0333743fb798d45248cbd92bc41320fed1b9cc6e5e768cb7137d1635f48"} {"level":"debug","ts":"2026-07-07T00:31:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08fd1fa3fb75427e25787b6e75cdca37458869fb60f85cea669e4413fb524d08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08fd1fa3fb75427e25787b6e75cdca37458869fb60f85cea669e4413fb524d08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08fd1fa3fb75427e25787b6e75cdca37458869fb60f85cea669e4413fb524d08","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08fd1fa3fb75427e25787b6e75cdca37458869fb60f85cea669e4413fb524d08"} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08fd1fa3fb75427e25787b6e75cdca37458869fb60f85cea669e4413fb524d08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16c7d0333743fb798d45248cbd92bc41320fed1b9cc6e5e768cb7137d1635f48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16c7d0333743fb798d45248cbd92bc41320fed1b9cc6e5e768cb7137d1635f48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08fd1fa3fb75427e25787b6e75cdca37458869fb60f85cea669e4413fb524d08"} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16c7d0333743fb798d45248cbd92bc41320fed1b9cc6e5e768cb7137d1635f48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16c7d0333743fb798d45248cbd92bc41320fed1b9cc6e5e768cb7137d1635f48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16c7d0333743fb798d45248cbd92bc41320fed1b9cc6e5e768cb7137d1635f48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16c7d0333743fb798d45248cbd92bc41320fed1b9cc6e5e768cb7137d1635f48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16c7d0333743fb798d45248cbd92bc41320fed1b9cc6e5e768cb7137d1635f48"} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16c7d0333743fb798d45248cbd92bc41320fed1b9cc6e5e768cb7137d1635f48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08fd1fa3fb75427e25787b6e75cdca37458869fb60f85cea669e4413fb524d08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08fd1fa3fb75427e25787b6e75cdca37458869fb60f85cea669e4413fb524d08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08fd1fa3fb75427e25787b6e75cdca37458869fb60f85cea669e4413fb524d08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16c7d0333743fb798d45248cbd92bc41320fed1b9cc6e5e768cb7137d1635f48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08fd1fa3fb75427e25787b6e75cdca37458869fb60f85cea669e4413fb524d08","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16c7d0333743fb798d45248cbd92bc41320fed1b9cc6e5e768cb7137d1635f48"} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08fd1fa3fb75427e25787b6e75cdca37458869fb60f85cea669e4413fb524d08"} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16c7d0333743fb798d45248cbd92bc41320fed1b9cc6e5e768cb7137d1635f48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16c7d0333743fb798d45248cbd92bc41320fed1b9cc6e5e768cb7137d1635f48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16c7d0333743fb798d45248cbd92bc41320fed1b9cc6e5e768cb7137d1635f48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55e77a9037da7079e63941cebbe38a3ec052a1a37624beeca1243ef6365961fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55e77a9037da7079e63941cebbe38a3ec052a1a37624beeca1243ef6365961fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16c7d0333743fb798d45248cbd92bc41320fed1b9cc6e5e768cb7137d1635f48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55e77a9037da7079e63941cebbe38a3ec052a1a37624beeca1243ef6365961fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55e77a9037da7079e63941cebbe38a3ec052a1a37624beeca1243ef6365961fd"} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55e77a9037da7079e63941cebbe38a3ec052a1a37624beeca1243ef6365961fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55e77a9037da7079e63941cebbe38a3ec052a1a37624beeca1243ef6365961fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55e77a9037da7079e63941cebbe38a3ec052a1a37624beeca1243ef6365961fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55e77a9037da7079e63941cebbe38a3ec052a1a37624beeca1243ef6365961fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16c7d0333743fb798d45248cbd92bc41320fed1b9cc6e5e768cb7137d1635f48"} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55e77a9037da7079e63941cebbe38a3ec052a1a37624beeca1243ef6365961fd"} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bdc0b37a0dcc8252a4793621c05dfbc2dadc29fd77b0118051aeb3fbe40dac8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bdc0b37a0dcc8252a4793621c05dfbc2dadc29fd77b0118051aeb3fbe40dac8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bdc0b37a0dcc8252a4793621c05dfbc2dadc29fd77b0118051aeb3fbe40dac8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bdc0b37a0dcc8252a4793621c05dfbc2dadc29fd77b0118051aeb3fbe40dac8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bdc0b37a0dcc8252a4793621c05dfbc2dadc29fd77b0118051aeb3fbe40dac8"} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bdc0b37a0dcc8252a4793621c05dfbc2dadc29fd77b0118051aeb3fbe40dac8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bdc0b37a0dcc8252a4793621c05dfbc2dadc29fd77b0118051aeb3fbe40dac8"} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bdc0b37a0dcc8252a4793621c05dfbc2dadc29fd77b0118051aeb3fbe40dac8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bdc0b37a0dcc8252a4793621c05dfbc2dadc29fd77b0118051aeb3fbe40dac8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bdc0b37a0dcc8252a4793621c05dfbc2dadc29fd77b0118051aeb3fbe40dac8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bdc0b37a0dcc8252a4793621c05dfbc2dadc29fd77b0118051aeb3fbe40dac8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bdc0b37a0dcc8252a4793621c05dfbc2dadc29fd77b0118051aeb3fbe40dac8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fd22970b0765dbd33b2342d4431a0a8aa1fb2046930cdb7d22e68b7d1389937","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bdc0b37a0dcc8252a4793621c05dfbc2dadc29fd77b0118051aeb3fbe40dac8"} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fd22970b0765dbd33b2342d4431a0a8aa1fb2046930cdb7d22e68b7d1389937","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bdc0b37a0dcc8252a4793621c05dfbc2dadc29fd77b0118051aeb3fbe40dac8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bdc0b37a0dcc8252a4793621c05dfbc2dadc29fd77b0118051aeb3fbe40dac8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fd22970b0765dbd33b2342d4431a0a8aa1fb2046930cdb7d22e68b7d1389937"} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bdc0b37a0dcc8252a4793621c05dfbc2dadc29fd77b0118051aeb3fbe40dac8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fd22970b0765dbd33b2342d4431a0a8aa1fb2046930cdb7d22e68b7d1389937","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fd22970b0765dbd33b2342d4431a0a8aa1fb2046930cdb7d22e68b7d1389937"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fd22970b0765dbd33b2342d4431a0a8aa1fb2046930cdb7d22e68b7d1389937","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bdc0b37a0dcc8252a4793621c05dfbc2dadc29fd77b0118051aeb3fbe40dac8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bdc0b37a0dcc8252a4793621c05dfbc2dadc29fd77b0118051aeb3fbe40dac8"} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bdc0b37a0dcc8252a4793621c05dfbc2dadc29fd77b0118051aeb3fbe40dac8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fd22970b0765dbd33b2342d4431a0a8aa1fb2046930cdb7d22e68b7d1389937","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fd22970b0765dbd33b2342d4431a0a8aa1fb2046930cdb7d22e68b7d1389937","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fd22970b0765dbd33b2342d4431a0a8aa1fb2046930cdb7d22e68b7d1389937"} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bdc0b37a0dcc8252a4793621c05dfbc2dadc29fd77b0118051aeb3fbe40dac8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bdc0b37a0dcc8252a4793621c05dfbc2dadc29fd77b0118051aeb3fbe40dac8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bdc0b37a0dcc8252a4793621c05dfbc2dadc29fd77b0118051aeb3fbe40dac8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fd22970b0765dbd33b2342d4431a0a8aa1fb2046930cdb7d22e68b7d1389937","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fd22970b0765dbd33b2342d4431a0a8aa1fb2046930cdb7d22e68b7d1389937"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bdc0b37a0dcc8252a4793621c05dfbc2dadc29fd77b0118051aeb3fbe40dac8"} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fd22970b0765dbd33b2342d4431a0a8aa1fb2046930cdb7d22e68b7d1389937","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74bc932726e5fd128020d078160b33e81091f3aa8a9f7c2d5560cabb3fe25279","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74bc932726e5fd128020d078160b33e81091f3aa8a9f7c2d5560cabb3fe25279","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bdc0b37a0dcc8252a4793621c05dfbc2dadc29fd77b0118051aeb3fbe40dac8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fd22970b0765dbd33b2342d4431a0a8aa1fb2046930cdb7d22e68b7d1389937","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fd22970b0765dbd33b2342d4431a0a8aa1fb2046930cdb7d22e68b7d1389937"} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fd22970b0765dbd33b2342d4431a0a8aa1fb2046930cdb7d22e68b7d1389937","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74bc932726e5fd128020d078160b33e81091f3aa8a9f7c2d5560cabb3fe25279","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74bc932726e5fd128020d078160b33e81091f3aa8a9f7c2d5560cabb3fe25279"} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74bc932726e5fd128020d078160b33e81091f3aa8a9f7c2d5560cabb3fe25279","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fd22970b0765dbd33b2342d4431a0a8aa1fb2046930cdb7d22e68b7d1389937","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fd22970b0765dbd33b2342d4431a0a8aa1fb2046930cdb7d22e68b7d1389937"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bdc0b37a0dcc8252a4793621c05dfbc2dadc29fd77b0118051aeb3fbe40dac8"} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fd22970b0765dbd33b2342d4431a0a8aa1fb2046930cdb7d22e68b7d1389937","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74bc932726e5fd128020d078160b33e81091f3aa8a9f7c2d5560cabb3fe25279","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74bc932726e5fd128020d078160b33e81091f3aa8a9f7c2d5560cabb3fe25279"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74bc932726e5fd128020d078160b33e81091f3aa8a9f7c2d5560cabb3fe25279","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fd22970b0765dbd33b2342d4431a0a8aa1fb2046930cdb7d22e68b7d1389937","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fd22970b0765dbd33b2342d4431a0a8aa1fb2046930cdb7d22e68b7d1389937"} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fd22970b0765dbd33b2342d4431a0a8aa1fb2046930cdb7d22e68b7d1389937","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74bc932726e5fd128020d078160b33e81091f3aa8a9f7c2d5560cabb3fe25279","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74bc932726e5fd128020d078160b33e81091f3aa8a9f7c2d5560cabb3fe25279","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21411d414d646397e77fcea3c0600b1e746febaaa429c8cd9b048601496eefcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74bc932726e5fd128020d078160b33e81091f3aa8a9f7c2d5560cabb3fe25279"} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21411d414d646397e77fcea3c0600b1e746febaaa429c8cd9b048601496eefcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fd22970b0765dbd33b2342d4431a0a8aa1fb2046930cdb7d22e68b7d1389937","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"031438b48555417cb802db9c93502bae42689d2a494360bd15e1df3277258850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"031438b48555417cb802db9c93502bae42689d2a494360bd15e1df3277258850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74bc932726e5fd128020d078160b33e81091f3aa8a9f7c2d5560cabb3fe25279","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74bc932726e5fd128020d078160b33e81091f3aa8a9f7c2d5560cabb3fe25279"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fd22970b0765dbd33b2342d4431a0a8aa1fb2046930cdb7d22e68b7d1389937"} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74bc932726e5fd128020d078160b33e81091f3aa8a9f7c2d5560cabb3fe25279","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21411d414d646397e77fcea3c0600b1e746febaaa429c8cd9b048601496eefcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21411d414d646397e77fcea3c0600b1e746febaaa429c8cd9b048601496eefcc"} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21411d414d646397e77fcea3c0600b1e746febaaa429c8cd9b048601496eefcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fd22970b0765dbd33b2342d4431a0a8aa1fb2046930cdb7d22e68b7d1389937","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fd22970b0765dbd33b2342d4431a0a8aa1fb2046930cdb7d22e68b7d1389937"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fd22970b0765dbd33b2342d4431a0a8aa1fb2046930cdb7d22e68b7d1389937","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"031438b48555417cb802db9c93502bae42689d2a494360bd15e1df3277258850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/031438b48555417cb802db9c93502bae42689d2a494360bd15e1df3277258850"} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"031438b48555417cb802db9c93502bae42689d2a494360bd15e1df3277258850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74bc932726e5fd128020d078160b33e81091f3aa8a9f7c2d5560cabb3fe25279","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74bc932726e5fd128020d078160b33e81091f3aa8a9f7c2d5560cabb3fe25279","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74bc932726e5fd128020d078160b33e81091f3aa8a9f7c2d5560cabb3fe25279"} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21411d414d646397e77fcea3c0600b1e746febaaa429c8cd9b048601496eefcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21411d414d646397e77fcea3c0600b1e746febaaa429c8cd9b048601496eefcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21411d414d646397e77fcea3c0600b1e746febaaa429c8cd9b048601496eefcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fd22970b0765dbd33b2342d4431a0a8aa1fb2046930cdb7d22e68b7d1389937","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"031438b48555417cb802db9c93502bae42689d2a494360bd15e1df3277258850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["031438b48555417cb802db9c93502bae42689d2a494360bd15e1df3277258850"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21411d414d646397e77fcea3c0600b1e746febaaa429c8cd9b048601496eefcc"} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"031438b48555417cb802db9c93502bae42689d2a494360bd15e1df3277258850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1161527a9036b7475c2237a0075558ee5de6c1c78ecb8a92fa8320dbd74d4ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1161527a9036b7475c2237a0075558ee5de6c1c78ecb8a92fa8320dbd74d4ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74bc932726e5fd128020d078160b33e81091f3aa8a9f7c2d5560cabb3fe25279","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74bc932726e5fd128020d078160b33e81091f3aa8a9f7c2d5560cabb3fe25279"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fd22970b0765dbd33b2342d4431a0a8aa1fb2046930cdb7d22e68b7d1389937"} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74bc932726e5fd128020d078160b33e81091f3aa8a9f7c2d5560cabb3fe25279","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/031438b48555417cb802db9c93502bae42689d2a494360bd15e1df3277258850"} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21411d414d646397e77fcea3c0600b1e746febaaa429c8cd9b048601496eefcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"031438b48555417cb802db9c93502bae42689d2a494360bd15e1df3277258850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1161527a9036b7475c2237a0075558ee5de6c1c78ecb8a92fa8320dbd74d4ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1161527a9036b7475c2237a0075558ee5de6c1c78ecb8a92fa8320dbd74d4ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74bc932726e5fd128020d078160b33e81091f3aa8a9f7c2d5560cabb3fe25279","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1161527a9036b7475c2237a0075558ee5de6c1c78ecb8a92fa8320dbd74d4ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1161527a9036b7475c2237a0075558ee5de6c1c78ecb8a92fa8320dbd74d4ed"} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1161527a9036b7475c2237a0075558ee5de6c1c78ecb8a92fa8320dbd74d4ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1161527a9036b7475c2237a0075558ee5de6c1c78ecb8a92fa8320dbd74d4ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1161527a9036b7475c2237a0075558ee5de6c1c78ecb8a92fa8320dbd74d4ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1161527a9036b7475c2237a0075558ee5de6c1c78ecb8a92fa8320dbd74d4ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74bc932726e5fd128020d078160b33e81091f3aa8a9f7c2d5560cabb3fe25279"} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21411d414d646397e77fcea3c0600b1e746febaaa429c8cd9b048601496eefcc"} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1161527a9036b7475c2237a0075558ee5de6c1c78ecb8a92fa8320dbd74d4ed"} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"} {"level":"debug","ts":"2026-07-07T00:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"} {"level":"debug","ts":"2026-07-07T00:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:31:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:31:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:31:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:31:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"} {"level":"info","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c731b5b-d2ad-4cf7-a4ce-1d7d94ce2273","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:40794","PortSpecifier":{"PortValue":40794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c731b5b-d2ad-4cf7-a4ce-1d7d94ce2273","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c731b5b-d2ad-4cf7-a4ce-1d7d94ce2273","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:40794","PortSpecifier":{"PortValue":40794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384288,"nanos":227585469},"http":{"id":"0c731b5b-d2ad-4cf7-a4ce-1d7d94ce2273","method":"POST","headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0c731b5b-d2ad-4cf7-a4ce-1d7d94ce2273","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c731b5b-d2ad-4cf7-a4ce-1d7d94ce2273","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"]}} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c731b5b-d2ad-4cf7-a4ce-1d7d94ce2273","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6561ae2232d5ae9b6d64b10c52eb289e61c90f40a460f287419b0246d27d1cdd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c731b5b-d2ad-4cf7-a4ce-1d7d94ce2273","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c731b5b-d2ad-4cf7-a4ce-1d7d94ce2273","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c731b5b-d2ad-4cf7-a4ce-1d7d94ce2273","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ea3965/auth-test-model-ea3965\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0c731b5b-d2ad-4cf7-a4ce-1d7d94ce2273","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c731b5b-d2ad-4cf7-a4ce-1d7d94ce2273","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c731b5b-d2ad-4cf7-a4ce-1d7d94ce2273","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c731b5b-d2ad-4cf7-a4ce-1d7d94ce2273","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c731b5b-d2ad-4cf7-a4ce-1d7d94ce2273","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94af194a-c227-428a-b3bd-429c1688f9ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60472","PortSpecifier":{"PortValue":60472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"94af194a-c227-428a-b3bd-429c1688f9ed","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94af194a-c227-428a-b3bd-429c1688f9ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60472","PortSpecifier":{"PortValue":60472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384288,"nanos":284394360},"http":{"id":"94af194a-c227-428a-b3bd-429c1688f9ed","method":"POST","headers":{":authority":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"94af194a-c227-428a-b3bd-429c1688f9ed","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"94af194a-c227-428a-b3bd-429c1688f9ed","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"]}} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"94af194a-c227-428a-b3bd-429c1688f9ed","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21411d414d646397e77fcea3c0600b1e746febaaa429c8cd9b048601496eefcc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94af194a-c227-428a-b3bd-429c1688f9ed","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94af194a-c227-428a-b3bd-429c1688f9ed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94af194a-c227-428a-b3bd-429c1688f9ed","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e15ad3/auth-test-model-e15ad3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"94af194a-c227-428a-b3bd-429c1688f9ed","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94af194a-c227-428a-b3bd-429c1688f9ed","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94af194a-c227-428a-b3bd-429c1688f9ed","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94af194a-c227-428a-b3bd-429c1688f9ed","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94af194a-c227-428a-b3bd-429c1688f9ed","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fbf3a54-9c01-48f7-bd45-9d8e249f0db0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:40808","PortSpecifier":{"PortValue":40808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2fbf3a54-9c01-48f7-bd45-9d8e249f0db0","method":"GET","path":"/maas-api/v1/api-keys/cba3874c-3398-4a0b-8378-681b359a69f2","host":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fbf3a54-9c01-48f7-bd45-9d8e249f0db0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:40808","PortSpecifier":{"PortValue":40808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384288,"nanos":385113311},"http":{"id":"2fbf3a54-9c01-48f7-bd45-9d8e249f0db0","method":"GET","headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/cba3874c-3398-4a0b-8378-681b359a69f2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2fbf3a54-9c01-48f7-bd45-9d8e249f0db0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2fbf3a54-9c01-48f7-bd45-9d8e249f0db0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"]}} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2fbf3a54-9c01-48f7-bd45-9d8e249f0db0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6561ae2232d5ae9b6d64b10c52eb289e61c90f40a460f287419b0246d27d1cdd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/cba3874c-3398-4a0b-8378-681b359a69f2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fbf3a54-9c01-48f7-bd45-9d8e249f0db0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fbf3a54-9c01-48f7-bd45-9d8e249f0db0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fbf3a54-9c01-48f7-bd45-9d8e249f0db0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ea3965/auth-test-model-ea3965\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2fbf3a54-9c01-48f7-bd45-9d8e249f0db0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fbf3a54-9c01-48f7-bd45-9d8e249f0db0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fbf3a54-9c01-48f7-bd45-9d8e249f0db0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fbf3a54-9c01-48f7-bd45-9d8e249f0db0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fbf3a54-9c01-48f7-bd45-9d8e249f0db0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"657bc657-999f-4223-b2ee-a66f593410f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60488","PortSpecifier":{"PortValue":60488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"657bc657-999f-4223-b2ee-a66f593410f3","method":"GET","path":"/maas-api/v1/api-keys/18117af2-c5ce-4c07-a6ab-fb2575440669","host":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"657bc657-999f-4223-b2ee-a66f593410f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60488","PortSpecifier":{"PortValue":60488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384288,"nanos":421153447},"http":{"id":"657bc657-999f-4223-b2ee-a66f593410f3","method":"GET","headers":{":authority":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/18117af2-c5ce-4c07-a6ab-fb2575440669",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"657bc657-999f-4223-b2ee-a66f593410f3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"657bc657-999f-4223-b2ee-a66f593410f3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"]}} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"657bc657-999f-4223-b2ee-a66f593410f3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21411d414d646397e77fcea3c0600b1e746febaaa429c8cd9b048601496eefcc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/18117af2-c5ce-4c07-a6ab-fb2575440669",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"657bc657-999f-4223-b2ee-a66f593410f3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"657bc657-999f-4223-b2ee-a66f593410f3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"657bc657-999f-4223-b2ee-a66f593410f3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e15ad3/auth-test-model-e15ad3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"657bc657-999f-4223-b2ee-a66f593410f3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"657bc657-999f-4223-b2ee-a66f593410f3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"657bc657-999f-4223-b2ee-a66f593410f3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"657bc657-999f-4223-b2ee-a66f593410f3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:31:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"657bc657-999f-4223-b2ee-a66f593410f3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:31:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7172fe6a-0333-4201-8909-8f7a83e391e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43360","PortSpecifier":{"PortValue":43360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7172fe6a-0333-4201-8909-8f7a83e391e7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:31:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7172fe6a-0333-4201-8909-8f7a83e391e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43360","PortSpecifier":{"PortValue":43360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384305,"nanos":922796274},"http":{"id":"7172fe6a-0333-4201-8909-8f7a83e391e7","method":"POST","headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:31:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7172fe6a-0333-4201-8909-8f7a83e391e7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:31:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7172fe6a-0333-4201-8909-8f7a83e391e7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"]}} {"level":"debug","ts":"2026-07-07T00:31:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7172fe6a-0333-4201-8909-8f7a83e391e7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6561ae2232d5ae9b6d64b10c52eb289e61c90f40a460f287419b0246d27d1cdd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:31:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7172fe6a-0333-4201-8909-8f7a83e391e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:31:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7172fe6a-0333-4201-8909-8f7a83e391e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:31:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7172fe6a-0333-4201-8909-8f7a83e391e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ea3965/auth-test-model-ea3965\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:31:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7172fe6a-0333-4201-8909-8f7a83e391e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:31:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7172fe6a-0333-4201-8909-8f7a83e391e7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:31:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7172fe6a-0333-4201-8909-8f7a83e391e7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:31:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7172fe6a-0333-4201-8909-8f7a83e391e7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:31:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7172fe6a-0333-4201-8909-8f7a83e391e7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:31:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02be7262-69db-4f01-98da-af755339b870","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59242","PortSpecifier":{"PortValue":59242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"02be7262-69db-4f01-98da-af755339b870","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:31:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02be7262-69db-4f01-98da-af755339b870","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59242","PortSpecifier":{"PortValue":59242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384305,"nanos":966690058},"http":{"id":"02be7262-69db-4f01-98da-af755339b870","method":"POST","headers":{":authority":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:31:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"02be7262-69db-4f01-98da-af755339b870","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:31:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"02be7262-69db-4f01-98da-af755339b870","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"]}} {"level":"debug","ts":"2026-07-07T00:31:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"02be7262-69db-4f01-98da-af755339b870","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21411d414d646397e77fcea3c0600b1e746febaaa429c8cd9b048601496eefcc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:31:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02be7262-69db-4f01-98da-af755339b870","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:31:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02be7262-69db-4f01-98da-af755339b870","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:31:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02be7262-69db-4f01-98da-af755339b870","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e15ad3/auth-test-model-e15ad3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:31:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"02be7262-69db-4f01-98da-af755339b870","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:31:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02be7262-69db-4f01-98da-af755339b870","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:31:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02be7262-69db-4f01-98da-af755339b870","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:31:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02be7262-69db-4f01-98da-af755339b870","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:31:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02be7262-69db-4f01-98da-af755339b870","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:31:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69bc20be-ddd3-48b3-9b2d-740974ebc373","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43376","PortSpecifier":{"PortValue":43376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"69bc20be-ddd3-48b3-9b2d-740974ebc373","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:31:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69bc20be-ddd3-48b3-9b2d-740974ebc373","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43376","PortSpecifier":{"PortValue":43376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384306,"nanos":1255497},"http":{"id":"69bc20be-ddd3-48b3-9b2d-740974ebc373","method":"GET","headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:31:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"69bc20be-ddd3-48b3-9b2d-740974ebc373","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-LaS0Pz1Rv0HOPEmu_Qa9W32oVg5q9AZMAiZEGMEW3FKwCRQ1Ouv4G8fMi8XZ"} {"level":"debug","ts":"2026-07-07T00:31:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"69bc20be-ddd3-48b3-9b2d-740974ebc373","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ea3965.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-LaS0Pz1Rv0HOPEmu_Qa9W32oVg5q9AZMAiZEGMEW3FKwCRQ1Ouv4G8fMi8XZ\"}"} {"level":"debug","ts":"2026-07-07T00:31:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"69bc20be-ddd3-48b3-9b2d-740974ebc373","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ea3965.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"47b403fe-2f88-47e9-96bb-9d6e613c1ca9","keyName":"e2e-auth-iso-a-00e03f","subscription":"e2e-auth-iso-9c100a","tenant":"e2e-shared-a-ea3965","userId":"47b403fe-2f88-47e9-96bb-9d6e613c1ca9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T00:31:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"69bc20be-ddd3-48b3-9b2d-740974ebc373","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:31:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69bc20be-ddd3-48b3-9b2d-740974ebc373","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:31:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69bc20be-ddd3-48b3-9b2d-740974ebc373","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:31:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69bc20be-ddd3-48b3-9b2d-740974ebc373","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ea3965/auth-test-model-ea3965\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:31:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69bc20be-ddd3-48b3-9b2d-740974ebc373","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:31:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69bc20be-ddd3-48b3-9b2d-740974ebc373","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-9c100a"} {"level":"debug","ts":"2026-07-07T00:31:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69bc20be-ddd3-48b3-9b2d-740974ebc373","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:31:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"69bc20be-ddd3-48b3-9b2d-740974ebc373","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-07T00:31:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69bc20be-ddd3-48b3-9b2d-740974ebc373","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:31:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69bc20be-ddd3-48b3-9b2d-740974ebc373","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:32:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e2a2e28-5412-4744-9973-836196bc8fe7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35006","PortSpecifier":{"PortValue":35006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3e2a2e28-5412-4744-9973-836196bc8fe7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:32:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e2a2e28-5412-4744-9973-836196bc8fe7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35006","PortSpecifier":{"PortValue":35006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384323,"nanos":336894923},"http":{"id":"3e2a2e28-5412-4744-9973-836196bc8fe7","method":"POST","headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:32:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3e2a2e28-5412-4744-9973-836196bc8fe7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:32:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3e2a2e28-5412-4744-9973-836196bc8fe7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"]}} {"level":"debug","ts":"2026-07-07T00:32:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3e2a2e28-5412-4744-9973-836196bc8fe7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6561ae2232d5ae9b6d64b10c52eb289e61c90f40a460f287419b0246d27d1cdd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:32:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e2a2e28-5412-4744-9973-836196bc8fe7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:32:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e2a2e28-5412-4744-9973-836196bc8fe7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:32:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e2a2e28-5412-4744-9973-836196bc8fe7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ea3965/auth-test-model-ea3965\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:32:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3e2a2e28-5412-4744-9973-836196bc8fe7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:32:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e2a2e28-5412-4744-9973-836196bc8fe7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:32:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e2a2e28-5412-4744-9973-836196bc8fe7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T00:32:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e2a2e28-5412-4744-9973-836196bc8fe7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:32:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e2a2e28-5412-4744-9973-836196bc8fe7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:32:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a75bcc13-7272-475f-999e-351f051b9570","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37212","PortSpecifier":{"PortValue":37212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a75bcc13-7272-475f-999e-351f051b9570","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:32:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a75bcc13-7272-475f-999e-351f051b9570","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37212","PortSpecifier":{"PortValue":37212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384323,"nanos":372170313},"http":{"id":"a75bcc13-7272-475f-999e-351f051b9570","method":"POST","headers":{":authority":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:32:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a75bcc13-7272-475f-999e-351f051b9570","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:32:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a75bcc13-7272-475f-999e-351f051b9570","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"]}} {"level":"debug","ts":"2026-07-07T00:32:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a75bcc13-7272-475f-999e-351f051b9570","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21411d414d646397e77fcea3c0600b1e746febaaa429c8cd9b048601496eefcc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:32:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a75bcc13-7272-475f-999e-351f051b9570","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:32:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a75bcc13-7272-475f-999e-351f051b9570","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:32:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a75bcc13-7272-475f-999e-351f051b9570","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e15ad3/auth-test-model-e15ad3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:32:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a75bcc13-7272-475f-999e-351f051b9570","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:32:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a75bcc13-7272-475f-999e-351f051b9570","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:32:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a75bcc13-7272-475f-999e-351f051b9570","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:32:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a75bcc13-7272-475f-999e-351f051b9570","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:32:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a75bcc13-7272-475f-999e-351f051b9570","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:32:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d166aaf3-4195-496a-9705-3aa7246a34f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37226","PortSpecifier":{"PortValue":37226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d166aaf3-4195-496a-9705-3aa7246a34f9","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:32:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d166aaf3-4195-496a-9705-3aa7246a34f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37226","PortSpecifier":{"PortValue":37226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384323,"nanos":407202023},"http":{"id":"d166aaf3-4195-496a-9705-3aa7246a34f9","method":"GET","headers":{":authority":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:32:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d166aaf3-4195-496a-9705-3aa7246a34f9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1elR361dxgkXrncrE_XrnzZSvmb3sEnbvyTvrpM9WPgfCRnfF2ch7D1BDHQBX"} {"level":"debug","ts":"2026-07-07T00:32:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d166aaf3-4195-496a-9705-3aa7246a34f9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e15ad3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1elR361dxgkXrncrE_XrnzZSvmb3sEnbvyTvrpM9WPgfCRnfF2ch7D1BDHQBX\"}"} {"level":"debug","ts":"2026-07-07T00:32:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d166aaf3-4195-496a-9705-3aa7246a34f9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e15ad3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-07T00:32:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d166aaf3-4195-496a-9705-3aa7246a34f9","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"21411d414d646397e77fcea3c0600b1e746febaaa429c8cd9b048601496eefcc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:32:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"d166aaf3-4195-496a-9705-3aa7246a34f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-07T00:32:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d166aaf3-4195-496a-9705-3aa7246a34f9","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-07T00:32:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d166aaf3-4195-496a-9705-3aa7246a34f9","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}} {"level":"info","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad7e034e-eb47-4e39-813b-3f13b4762915","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:46524","PortSpecifier":{"PortValue":46524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ad7e034e-eb47-4e39-813b-3f13b4762915","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad7e034e-eb47-4e39-813b-3f13b4762915","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:46524","PortSpecifier":{"PortValue":46524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384340,"nanos":684231076},"http":{"id":"ad7e034e-eb47-4e39-813b-3f13b4762915","method":"POST","headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ad7e034e-eb47-4e39-813b-3f13b4762915","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ad7e034e-eb47-4e39-813b-3f13b4762915","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"]}} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ad7e034e-eb47-4e39-813b-3f13b4762915","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6561ae2232d5ae9b6d64b10c52eb289e61c90f40a460f287419b0246d27d1cdd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad7e034e-eb47-4e39-813b-3f13b4762915","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad7e034e-eb47-4e39-813b-3f13b4762915","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad7e034e-eb47-4e39-813b-3f13b4762915","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ea3965/auth-test-model-ea3965\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ad7e034e-eb47-4e39-813b-3f13b4762915","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad7e034e-eb47-4e39-813b-3f13b4762915","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad7e034e-eb47-4e39-813b-3f13b4762915","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad7e034e-eb47-4e39-813b-3f13b4762915","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad7e034e-eb47-4e39-813b-3f13b4762915","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25fedf2c-1568-4030-9e42-606818394b22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:42948","PortSpecifier":{"PortValue":42948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"25fedf2c-1568-4030-9e42-606818394b22","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25fedf2c-1568-4030-9e42-606818394b22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:42948","PortSpecifier":{"PortValue":42948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384340,"nanos":720262000},"http":{"id":"25fedf2c-1568-4030-9e42-606818394b22","method":"POST","headers":{":authority":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"25fedf2c-1568-4030-9e42-606818394b22","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"25fedf2c-1568-4030-9e42-606818394b22","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"]}} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"25fedf2c-1568-4030-9e42-606818394b22","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21411d414d646397e77fcea3c0600b1e746febaaa429c8cd9b048601496eefcc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25fedf2c-1568-4030-9e42-606818394b22","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25fedf2c-1568-4030-9e42-606818394b22","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25fedf2c-1568-4030-9e42-606818394b22","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e15ad3/auth-test-model-e15ad3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"25fedf2c-1568-4030-9e42-606818394b22","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25fedf2c-1568-4030-9e42-606818394b22","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25fedf2c-1568-4030-9e42-606818394b22","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25fedf2c-1568-4030-9e42-606818394b22","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25fedf2c-1568-4030-9e42-606818394b22","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd7100e6-a551-447f-a165-42b7555cd542","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:46532","PortSpecifier":{"PortValue":46532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd7100e6-a551-447f-a165-42b7555cd542","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd7100e6-a551-447f-a165-42b7555cd542","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:46532","PortSpecifier":{"PortValue":46532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384340,"nanos":753560597},"http":{"id":"cd7100e6-a551-447f-a165-42b7555cd542","method":"POST","headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cd7100e6-a551-447f-a165-42b7555cd542","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd7100e6-a551-447f-a165-42b7555cd542","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"]}} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd7100e6-a551-447f-a165-42b7555cd542","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6561ae2232d5ae9b6d64b10c52eb289e61c90f40a460f287419b0246d27d1cdd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd7100e6-a551-447f-a165-42b7555cd542","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd7100e6-a551-447f-a165-42b7555cd542","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd7100e6-a551-447f-a165-42b7555cd542","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ea3965/auth-test-model-ea3965\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cd7100e6-a551-447f-a165-42b7555cd542","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd7100e6-a551-447f-a165-42b7555cd542","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd7100e6-a551-447f-a165-42b7555cd542","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd7100e6-a551-447f-a165-42b7555cd542","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd7100e6-a551-447f-a165-42b7555cd542","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"401773b8-b510-458e-bc72-4ee800696e79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:42950","PortSpecifier":{"PortValue":42950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"401773b8-b510-458e-bc72-4ee800696e79","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"401773b8-b510-458e-bc72-4ee800696e79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:42950","PortSpecifier":{"PortValue":42950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384340,"nanos":785538283},"http":{"id":"401773b8-b510-458e-bc72-4ee800696e79","method":"POST","headers":{":authority":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"401773b8-b510-458e-bc72-4ee800696e79","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"401773b8-b510-458e-bc72-4ee800696e79","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"]}} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"401773b8-b510-458e-bc72-4ee800696e79","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21411d414d646397e77fcea3c0600b1e746febaaa429c8cd9b048601496eefcc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"401773b8-b510-458e-bc72-4ee800696e79","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"401773b8-b510-458e-bc72-4ee800696e79","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"401773b8-b510-458e-bc72-4ee800696e79","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e15ad3/auth-test-model-e15ad3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"401773b8-b510-458e-bc72-4ee800696e79","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"401773b8-b510-458e-bc72-4ee800696e79","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"401773b8-b510-458e-bc72-4ee800696e79","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"401773b8-b510-458e-bc72-4ee800696e79","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"401773b8-b510-458e-bc72-4ee800696e79","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04b43ebf-d73c-4b0f-acf5-6fff669d1b40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:46142","PortSpecifier":{"PortValue":46142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"04b43ebf-d73c-4b0f-acf5-6fff669d1b40","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04b43ebf-d73c-4b0f-acf5-6fff669d1b40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:46142","PortSpecifier":{"PortValue":46142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384358,"nanos":6824624},"http":{"id":"04b43ebf-d73c-4b0f-acf5-6fff669d1b40","method":"POST","headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"04b43ebf-d73c-4b0f-acf5-6fff669d1b40","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"04b43ebf-d73c-4b0f-acf5-6fff669d1b40","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"]}} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"04b43ebf-d73c-4b0f-acf5-6fff669d1b40","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6561ae2232d5ae9b6d64b10c52eb289e61c90f40a460f287419b0246d27d1cdd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04b43ebf-d73c-4b0f-acf5-6fff669d1b40","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04b43ebf-d73c-4b0f-acf5-6fff669d1b40","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04b43ebf-d73c-4b0f-acf5-6fff669d1b40","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ea3965/auth-test-model-ea3965\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"04b43ebf-d73c-4b0f-acf5-6fff669d1b40","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04b43ebf-d73c-4b0f-acf5-6fff669d1b40","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04b43ebf-d73c-4b0f-acf5-6fff669d1b40","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04b43ebf-d73c-4b0f-acf5-6fff669d1b40","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04b43ebf-d73c-4b0f-acf5-6fff669d1b40","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"471c296d-cac5-46a4-851e-425bb387b689","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:42674","PortSpecifier":{"PortValue":42674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"471c296d-cac5-46a4-851e-425bb387b689","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"471c296d-cac5-46a4-851e-425bb387b689","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:42674","PortSpecifier":{"PortValue":42674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384358,"nanos":39726094},"http":{"id":"471c296d-cac5-46a4-851e-425bb387b689","method":"POST","headers":{":authority":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"471c296d-cac5-46a4-851e-425bb387b689","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"471c296d-cac5-46a4-851e-425bb387b689","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"]}} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"471c296d-cac5-46a4-851e-425bb387b689","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21411d414d646397e77fcea3c0600b1e746febaaa429c8cd9b048601496eefcc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"471c296d-cac5-46a4-851e-425bb387b689","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"471c296d-cac5-46a4-851e-425bb387b689","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"471c296d-cac5-46a4-851e-425bb387b689","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e15ad3/auth-test-model-e15ad3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"471c296d-cac5-46a4-851e-425bb387b689","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"471c296d-cac5-46a4-851e-425bb387b689","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"471c296d-cac5-46a4-851e-425bb387b689","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"471c296d-cac5-46a4-851e-425bb387b689","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"471c296d-cac5-46a4-851e-425bb387b689","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"640a1516-19f4-4ef5-8356-6d0b62716e2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:42690","PortSpecifier":{"PortValue":42690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"640a1516-19f4-4ef5-8356-6d0b62716e2f","method":"GET","path":"/maas-api/v1/api-keys/45c79a3d-3a2c-4ba6-a312-6dcb9203e8b8","host":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"640a1516-19f4-4ef5-8356-6d0b62716e2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:42690","PortSpecifier":{"PortValue":42690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384358,"nanos":76294121},"http":{"id":"640a1516-19f4-4ef5-8356-6d0b62716e2f","method":"GET","headers":{":authority":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/45c79a3d-3a2c-4ba6-a312-6dcb9203e8b8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"640a1516-19f4-4ef5-8356-6d0b62716e2f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"640a1516-19f4-4ef5-8356-6d0b62716e2f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"]}} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"640a1516-19f4-4ef5-8356-6d0b62716e2f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21411d414d646397e77fcea3c0600b1e746febaaa429c8cd9b048601496eefcc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/45c79a3d-3a2c-4ba6-a312-6dcb9203e8b8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"640a1516-19f4-4ef5-8356-6d0b62716e2f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"640a1516-19f4-4ef5-8356-6d0b62716e2f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"640a1516-19f4-4ef5-8356-6d0b62716e2f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e15ad3/auth-test-model-e15ad3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"640a1516-19f4-4ef5-8356-6d0b62716e2f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"640a1516-19f4-4ef5-8356-6d0b62716e2f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"640a1516-19f4-4ef5-8356-6d0b62716e2f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"640a1516-19f4-4ef5-8356-6d0b62716e2f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"640a1516-19f4-4ef5-8356-6d0b62716e2f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"875dd8d0-deb7-4855-816e-b2bfa8303a4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:46156","PortSpecifier":{"PortValue":46156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"875dd8d0-deb7-4855-816e-b2bfa8303a4c","method":"GET","path":"/maas-api/v1/api-keys/45c79a3d-3a2c-4ba6-a312-6dcb9203e8b8","host":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"875dd8d0-deb7-4855-816e-b2bfa8303a4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:46156","PortSpecifier":{"PortValue":46156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384358,"nanos":107479199},"http":{"id":"875dd8d0-deb7-4855-816e-b2bfa8303a4c","method":"GET","headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/45c79a3d-3a2c-4ba6-a312-6dcb9203e8b8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"875dd8d0-deb7-4855-816e-b2bfa8303a4c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"875dd8d0-deb7-4855-816e-b2bfa8303a4c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"]}} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"875dd8d0-deb7-4855-816e-b2bfa8303a4c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6561ae2232d5ae9b6d64b10c52eb289e61c90f40a460f287419b0246d27d1cdd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/45c79a3d-3a2c-4ba6-a312-6dcb9203e8b8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"875dd8d0-deb7-4855-816e-b2bfa8303a4c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"875dd8d0-deb7-4855-816e-b2bfa8303a4c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"875dd8d0-deb7-4855-816e-b2bfa8303a4c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ea3965/auth-test-model-ea3965\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"875dd8d0-deb7-4855-816e-b2bfa8303a4c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"875dd8d0-deb7-4855-816e-b2bfa8303a4c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"875dd8d0-deb7-4855-816e-b2bfa8303a4c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"875dd8d0-deb7-4855-816e-b2bfa8303a4c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"875dd8d0-deb7-4855-816e-b2bfa8303a4c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1eefa10d-42cc-4a41-8b80-565207ebdb18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34896","PortSpecifier":{"PortValue":34896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1eefa10d-42cc-4a41-8b80-565207ebdb18","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1eefa10d-42cc-4a41-8b80-565207ebdb18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34896","PortSpecifier":{"PortValue":34896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384382,"nanos":662762272},"http":{"id":"1eefa10d-42cc-4a41-8b80-565207ebdb18","method":"POST","headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1eefa10d-42cc-4a41-8b80-565207ebdb18","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1eefa10d-42cc-4a41-8b80-565207ebdb18","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"]}} {"level":"debug","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1eefa10d-42cc-4a41-8b80-565207ebdb18","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6561ae2232d5ae9b6d64b10c52eb289e61c90f40a460f287419b0246d27d1cdd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1eefa10d-42cc-4a41-8b80-565207ebdb18","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1eefa10d-42cc-4a41-8b80-565207ebdb18","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1eefa10d-42cc-4a41-8b80-565207ebdb18","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ea3965/auth-test-model-ea3965\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1eefa10d-42cc-4a41-8b80-565207ebdb18","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1eefa10d-42cc-4a41-8b80-565207ebdb18","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1eefa10d-42cc-4a41-8b80-565207ebdb18","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1eefa10d-42cc-4a41-8b80-565207ebdb18","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1eefa10d-42cc-4a41-8b80-565207ebdb18","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c5c2cd1-46d0-4387-a450-ad9b98ddcef2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58058","PortSpecifier":{"PortValue":58058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1c5c2cd1-46d0-4387-a450-ad9b98ddcef2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c5c2cd1-46d0-4387-a450-ad9b98ddcef2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58058","PortSpecifier":{"PortValue":58058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384382,"nanos":696808359},"http":{"id":"1c5c2cd1-46d0-4387-a450-ad9b98ddcef2","method":"POST","headers":{":authority":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1c5c2cd1-46d0-4387-a450-ad9b98ddcef2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1c5c2cd1-46d0-4387-a450-ad9b98ddcef2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"]}} {"level":"debug","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1c5c2cd1-46d0-4387-a450-ad9b98ddcef2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21411d414d646397e77fcea3c0600b1e746febaaa429c8cd9b048601496eefcc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c5c2cd1-46d0-4387-a450-ad9b98ddcef2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c5c2cd1-46d0-4387-a450-ad9b98ddcef2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c5c2cd1-46d0-4387-a450-ad9b98ddcef2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e15ad3/auth-test-model-e15ad3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1c5c2cd1-46d0-4387-a450-ad9b98ddcef2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c5c2cd1-46d0-4387-a450-ad9b98ddcef2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c5c2cd1-46d0-4387-a450-ad9b98ddcef2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c5c2cd1-46d0-4387-a450-ad9b98ddcef2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c5c2cd1-46d0-4387-a450-ad9b98ddcef2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3091c44f-a7a8-419d-a3b7-cb17686eb63d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34910","PortSpecifier":{"PortValue":34910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3091c44f-a7a8-419d-a3b7-cb17686eb63d","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3091c44f-a7a8-419d-a3b7-cb17686eb63d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34910","PortSpecifier":{"PortValue":34910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384382,"nanos":733376649},"http":{"id":"3091c44f-a7a8-419d-a3b7-cb17686eb63d","method":"POST","headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3091c44f-a7a8-419d-a3b7-cb17686eb63d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-thPtfnFtr3VipOjk_abEjrcLKzwSsfsVLznL4ohNphf0JK4oK2qgmp4JsOYM"} {"level":"debug","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3091c44f-a7a8-419d-a3b7-cb17686eb63d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ea3965.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-thPtfnFtr3VipOjk_abEjrcLKzwSsfsVLznL4ohNphf0JK4oK2qgmp4JsOYM\"}"} {"level":"debug","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3091c44f-a7a8-419d-a3b7-cb17686eb63d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ea3965.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9a3a0d88-453f-486e-adfc-4c4379b95820","keyName":"e2e-auth-iso-a-01d728","subscription":"e2e-auth-iso-12b218","tenant":"e2e-shared-a-ea3965","userId":"9a3a0d88-453f-486e-adfc-4c4379b95820","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3091c44f-a7a8-419d-a3b7-cb17686eb63d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3091c44f-a7a8-419d-a3b7-cb17686eb63d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3091c44f-a7a8-419d-a3b7-cb17686eb63d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3091c44f-a7a8-419d-a3b7-cb17686eb63d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ea3965/auth-test-model-ea3965\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3091c44f-a7a8-419d-a3b7-cb17686eb63d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3091c44f-a7a8-419d-a3b7-cb17686eb63d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-12b218"} {"level":"debug","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3091c44f-a7a8-419d-a3b7-cb17686eb63d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3091c44f-a7a8-419d-a3b7-cb17686eb63d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3091c44f-a7a8-419d-a3b7-cb17686eb63d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:33:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3091c44f-a7a8-419d-a3b7-cb17686eb63d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8604172cd368cd8e58ea892313231932fa09324f17e9a752eb17d33b8fba828"} {"level":"info","ts":"2026-07-07T00:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb2c2e3f95df23b497b0145766a8d914a930ba4422bc942b202c3b28f32ce1a4"} {"level":"info","ts":"2026-07-07T00:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4646993966ae5af538787f1e177cdaa447217625e0ccff3c76d8cc8c72d000a"} {"level":"info","ts":"2026-07-07T00:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cfd94f302cd531dbdb2d92ef824279ac78369713d78cf6c4fdcff0f4235ce6d6"} {"level":"info","ts":"2026-07-07T00:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5526b2b82f9b47aea5fb2d1257fa699e91c92012b3a27efb96b3cc8c07fb110"} {"level":"info","ts":"2026-07-07T00:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16c7d0333743fb798d45248cbd92bc41320fed1b9cc6e5e768cb7137d1635f48"} {"level":"info","ts":"2026-07-07T00:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc3f5c42a815a063fbb38f85e11562e4e3ef005d5724b7d50a30af71b345768d"} {"level":"info","ts":"2026-07-07T00:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/005ecadee0fc256e56c08ac1a11f351ff189685ddca6a4d8669cbeb6c3202c6e"} {"level":"info","ts":"2026-07-07T00:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55e77a9037da7079e63941cebbe38a3ec052a1a37624beeca1243ef6365961fd"} {"level":"info","ts":"2026-07-07T00:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7fd22970b0765dbd33b2342d4431a0a8aa1fb2046930cdb7d22e68b7d1389937"} {"level":"info","ts":"2026-07-07T00:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b52a505e002447aeb72942c7741f24f370f43033ecbebdc3d72ebd004c96fb72"} {"level":"info","ts":"2026-07-07T00:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08fd1fa3fb75427e25787b6e75cdca37458869fb60f85cea669e4413fb524d08"} {"level":"info","ts":"2026-07-07T00:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fee13a7bca2d7603c5e04c83278a121b90ae7c1d91bd3ff6d963bb4cd5b093cb"} {"level":"info","ts":"2026-07-07T00:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5aa4b9ed184b11a57a4d7e17915e821113a8ae830af9bf8332e637dcc74f1af8"} {"level":"info","ts":"2026-07-07T00:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1cab1553daacd98d43c7c48dc1c667e13f6cfa77e220f8dd17a46d1ed4441f19"} {"level":"info","ts":"2026-07-07T00:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bdc0b37a0dcc8252a4793621c05dfbc2dadc29fd77b0118051aeb3fbe40dac8"} {"level":"debug","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36"} {"level":"debug","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36"} {"level":"debug","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a9ea4d61035a4af9c8059968ab187bfcae08559b0d548510145f3a3f8a602f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36"} {"level":"info","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a9ea4d61035a4af9c8059968ab187bfcae08559b0d548510145f3a3f8a602f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a9ea4d61035a4af9c8059968ab187bfcae08559b0d548510145f3a3f8a602f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a9ea4d61035a4af9c8059968ab187bfcae08559b0d548510145f3a3f8a602f1"} {"level":"info","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a9ea4d61035a4af9c8059968ab187bfcae08559b0d548510145f3a3f8a602f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a9ea4d61035a4af9c8059968ab187bfcae08559b0d548510145f3a3f8a602f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a9ea4d61035a4af9c8059968ab187bfcae08559b0d548510145f3a3f8a602f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36"} {"level":"info","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a9ea4d61035a4af9c8059968ab187bfcae08559b0d548510145f3a3f8a602f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a9ea4d61035a4af9c8059968ab187bfcae08559b0d548510145f3a3f8a602f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a9ea4d61035a4af9c8059968ab187bfcae08559b0d548510145f3a3f8a602f1"} {"level":"info","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a9ea4d61035a4af9c8059968ab187bfcae08559b0d548510145f3a3f8a602f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a9ea4d61035a4af9c8059968ab187bfcae08559b0d548510145f3a3f8a602f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a9ea4d61035a4af9c8059968ab187bfcae08559b0d548510145f3a3f8a602f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36"} {"level":"info","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a9ea4d61035a4af9c8059968ab187bfcae08559b0d548510145f3a3f8a602f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a9ea4d61035a4af9c8059968ab187bfcae08559b0d548510145f3a3f8a602f1"} {"level":"info","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a9ea4d61035a4af9c8059968ab187bfcae08559b0d548510145f3a3f8a602f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36"} {"level":"debug","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a9ea4d61035a4af9c8059968ab187bfcae08559b0d548510145f3a3f8a602f1"} {"level":"info","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36"} {"level":"debug","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cb73f42c9b13acced4bb751dc929d4faf7ea73022602056461505eaab408706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cb73f42c9b13acced4bb751dc929d4faf7ea73022602056461505eaab408706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cb73f42c9b13acced4bb751dc929d4faf7ea73022602056461505eaab408706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cb73f42c9b13acced4bb751dc929d4faf7ea73022602056461505eaab408706","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cb73f42c9b13acced4bb751dc929d4faf7ea73022602056461505eaab408706"} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cb73f42c9b13acced4bb751dc929d4faf7ea73022602056461505eaab408706","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cb73f42c9b13acced4bb751dc929d4faf7ea73022602056461505eaab408706"} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cb73f42c9b13acced4bb751dc929d4faf7ea73022602056461505eaab408706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cb73f42c9b13acced4bb751dc929d4faf7ea73022602056461505eaab408706"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cb73f42c9b13acced4bb751dc929d4faf7ea73022602056461505eaab408706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cb73f42c9b13acced4bb751dc929d4faf7ea73022602056461505eaab408706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c357a912a195cdb7e1c4f326d7f5bf011111c2d356fb833346d8d0680294f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cb73f42c9b13acced4bb751dc929d4faf7ea73022602056461505eaab408706"} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c357a912a195cdb7e1c4f326d7f5bf011111c2d356fb833346d8d0680294f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c357a912a195cdb7e1c4f326d7f5bf011111c2d356fb833346d8d0680294f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c357a912a195cdb7e1c4f326d7f5bf011111c2d356fb833346d8d0680294f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c357a912a195cdb7e1c4f326d7f5bf011111c2d356fb833346d8d0680294f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c357a912a195cdb7e1c4f326d7f5bf011111c2d356fb833346d8d0680294f4"} {"level":"error","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"98c357a912a195cdb7e1c4f326d7f5bf011111c2d356fb833346d8d0680294f4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"98c357a912a195cdb7e1c4f326d7f5bf011111c2d356fb833346d8d0680294f4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98c357a912a195cdb7e1c4f326d7f5bf011111c2d356fb833346d8d0680294f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98c357a912a195cdb7e1c4f326d7f5bf011111c2d356fb833346d8d0680294f4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c357a912a195cdb7e1c4f326d7f5bf011111c2d356fb833346d8d0680294f4"} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a82d8bfc05e49f3bbcf63bf1ad6265732ab4e19fd99e1edd493c74dbaca1da0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a82d8bfc05e49f3bbcf63bf1ad6265732ab4e19fd99e1edd493c74dbaca1da0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a82d8bfc05e49f3bbcf63bf1ad6265732ab4e19fd99e1edd493c74dbaca1da0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a82d8bfc05e49f3bbcf63bf1ad6265732ab4e19fd99e1edd493c74dbaca1da0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a82d8bfc05e49f3bbcf63bf1ad6265732ab4e19fd99e1edd493c74dbaca1da0"} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c357a912a195cdb7e1c4f326d7f5bf011111c2d356fb833346d8d0680294f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98c357a912a195cdb7e1c4f326d7f5bf011111c2d356fb833346d8d0680294f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c357a912a195cdb7e1c4f326d7f5bf011111c2d356fb833346d8d0680294f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98c357a912a195cdb7e1c4f326d7f5bf011111c2d356fb833346d8d0680294f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a82d8bfc05e49f3bbcf63bf1ad6265732ab4e19fd99e1edd493c74dbaca1da0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a82d8bfc05e49f3bbcf63bf1ad6265732ab4e19fd99e1edd493c74dbaca1da0"} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c357a912a195cdb7e1c4f326d7f5bf011111c2d356fb833346d8d0680294f4"} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a82d8bfc05e49f3bbcf63bf1ad6265732ab4e19fd99e1edd493c74dbaca1da0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a82d8bfc05e49f3bbcf63bf1ad6265732ab4e19fd99e1edd493c74dbaca1da0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a82d8bfc05e49f3bbcf63bf1ad6265732ab4e19fd99e1edd493c74dbaca1da0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a82d8bfc05e49f3bbcf63bf1ad6265732ab4e19fd99e1edd493c74dbaca1da0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a82d8bfc05e49f3bbcf63bf1ad6265732ab4e19fd99e1edd493c74dbaca1da0"} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132"} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132"} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa02fe0391deef860079c4e1509342fab05b3e63499b4906e71ac9d7cb494a45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132"} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa02fe0391deef860079c4e1509342fab05b3e63499b4906e71ac9d7cb494a45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa02fe0391deef860079c4e1509342fab05b3e63499b4906e71ac9d7cb494a45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa02fe0391deef860079c4e1509342fab05b3e63499b4906e71ac9d7cb494a45"} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa02fe0391deef860079c4e1509342fab05b3e63499b4906e71ac9d7cb494a45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132"} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa02fe0391deef860079c4e1509342fab05b3e63499b4906e71ac9d7cb494a45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa02fe0391deef860079c4e1509342fab05b3e63499b4906e71ac9d7cb494a45"} {"level":"error","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa02fe0391deef860079c4e1509342fab05b3e63499b4906e71ac9d7cb494a45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa02fe0391deef860079c4e1509342fab05b3e63499b4906e71ac9d7cb494a45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa02fe0391deef860079c4e1509342fab05b3e63499b4906e71ac9d7cb494a45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132"} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caada3a7ad71ce8252335f5d621c319b0e58264a60e85b1c1c977c4db8bd34b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caada3a7ad71ce8252335f5d621c319b0e58264a60e85b1c1c977c4db8bd34b5"} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caada3a7ad71ce8252335f5d621c319b0e58264a60e85b1c1c977c4db8bd34b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa02fe0391deef860079c4e1509342fab05b3e63499b4906e71ac9d7cb494a45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa02fe0391deef860079c4e1509342fab05b3e63499b4906e71ac9d7cb494a45"} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa02fe0391deef860079c4e1509342fab05b3e63499b4906e71ac9d7cb494a45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caada3a7ad71ce8252335f5d621c319b0e58264a60e85b1c1c977c4db8bd34b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caada3a7ad71ce8252335f5d621c319b0e58264a60e85b1c1c977c4db8bd34b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caada3a7ad71ce8252335f5d621c319b0e58264a60e85b1c1c977c4db8bd34b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa02fe0391deef860079c4e1509342fab05b3e63499b4906e71ac9d7cb494a45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa02fe0391deef860079c4e1509342fab05b3e63499b4906e71ac9d7cb494a45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132"} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa02fe0391deef860079c4e1509342fab05b3e63499b4906e71ac9d7cb494a45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caada3a7ad71ce8252335f5d621c319b0e58264a60e85b1c1c977c4db8bd34b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caada3a7ad71ce8252335f5d621c319b0e58264a60e85b1c1c977c4db8bd34b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caada3a7ad71ce8252335f5d621c319b0e58264a60e85b1c1c977c4db8bd34b5"} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa02fe0391deef860079c4e1509342fab05b3e63499b4906e71ac9d7cb494a45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa02fe0391deef860079c4e1509342fab05b3e63499b4906e71ac9d7cb494a45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caada3a7ad71ce8252335f5d621c319b0e58264a60e85b1c1c977c4db8bd34b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caada3a7ad71ce8252335f5d621c319b0e58264a60e85b1c1c977c4db8bd34b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa02fe0391deef860079c4e1509342fab05b3e63499b4906e71ac9d7cb494a45"} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caada3a7ad71ce8252335f5d621c319b0e58264a60e85b1c1c977c4db8bd34b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa02fe0391deef860079c4e1509342fab05b3e63499b4906e71ac9d7cb494a45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa02fe0391deef860079c4e1509342fab05b3e63499b4906e71ac9d7cb494a45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa02fe0391deef860079c4e1509342fab05b3e63499b4906e71ac9d7cb494a45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caada3a7ad71ce8252335f5d621c319b0e58264a60e85b1c1c977c4db8bd34b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caada3a7ad71ce8252335f5d621c319b0e58264a60e85b1c1c977c4db8bd34b5"} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caada3a7ad71ce8252335f5d621c319b0e58264a60e85b1c1c977c4db8bd34b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa02fe0391deef860079c4e1509342fab05b3e63499b4906e71ac9d7cb494a45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caada3a7ad71ce8252335f5d621c319b0e58264a60e85b1c1c977c4db8bd34b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caada3a7ad71ce8252335f5d621c319b0e58264a60e85b1c1c977c4db8bd34b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caada3a7ad71ce8252335f5d621c319b0e58264a60e85b1c1c977c4db8bd34b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caada3a7ad71ce8252335f5d621c319b0e58264a60e85b1c1c977c4db8bd34b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caada3a7ad71ce8252335f5d621c319b0e58264a60e85b1c1c977c4db8bd34b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132"} {"level":"error","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"caada3a7ad71ce8252335f5d621c319b0e58264a60e85b1c1c977c4db8bd34b5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"caada3a7ad71ce8252335f5d621c319b0e58264a60e85b1c1c977c4db8bd34b5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caada3a7ad71ce8252335f5d621c319b0e58264a60e85b1c1c977c4db8bd34b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caada3a7ad71ce8252335f5d621c319b0e58264a60e85b1c1c977c4db8bd34b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa02fe0391deef860079c4e1509342fab05b3e63499b4906e71ac9d7cb494a45"} {"level":"info","ts":"2026-07-07T00:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caada3a7ad71ce8252335f5d621c319b0e58264a60e85b1c1c977c4db8bd34b5"} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f54fc6a41ccb4463742fd6db8c0ce90f63812023405c8f0108d85d6f88d24e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f54fc6a41ccb4463742fd6db8c0ce90f63812023405c8f0108d85d6f88d24e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f54fc6a41ccb4463742fd6db8c0ce90f63812023405c8f0108d85d6f88d24e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f54fc6a41ccb4463742fd6db8c0ce90f63812023405c8f0108d85d6f88d24e"} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f54fc6a41ccb4463742fd6db8c0ce90f63812023405c8f0108d85d6f88d24e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f54fc6a41ccb4463742fd6db8c0ce90f63812023405c8f0108d85d6f88d24e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"94f54fc6a41ccb4463742fd6db8c0ce90f63812023405c8f0108d85d6f88d24e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"94f54fc6a41ccb4463742fd6db8c0ce90f63812023405c8f0108d85d6f88d24e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94f54fc6a41ccb4463742fd6db8c0ce90f63812023405c8f0108d85d6f88d24e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94f54fc6a41ccb4463742fd6db8c0ce90f63812023405c8f0108d85d6f88d24e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f54fc6a41ccb4463742fd6db8c0ce90f63812023405c8f0108d85d6f88d24e"} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f54fc6a41ccb4463742fd6db8c0ce90f63812023405c8f0108d85d6f88d24e"} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f54fc6a41ccb4463742fd6db8c0ce90f63812023405c8f0108d85d6f88d24e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94f54fc6a41ccb4463742fd6db8c0ce90f63812023405c8f0108d85d6f88d24e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f54fc6a41ccb4463742fd6db8c0ce90f63812023405c8f0108d85d6f88d24e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94f54fc6a41ccb4463742fd6db8c0ce90f63812023405c8f0108d85d6f88d24e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f54fc6a41ccb4463742fd6db8c0ce90f63812023405c8f0108d85d6f88d24e"} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78f2be33186ca28327bbd30851182ec6ee649c4ccc4627269e5c364b4a71441d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78f2be33186ca28327bbd30851182ec6ee649c4ccc4627269e5c364b4a71441d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78f2be33186ca28327bbd30851182ec6ee649c4ccc4627269e5c364b4a71441d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78f2be33186ca28327bbd30851182ec6ee649c4ccc4627269e5c364b4a71441d"} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78f2be33186ca28327bbd30851182ec6ee649c4ccc4627269e5c364b4a71441d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78f2be33186ca28327bbd30851182ec6ee649c4ccc4627269e5c364b4a71441d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"78f2be33186ca28327bbd30851182ec6ee649c4ccc4627269e5c364b4a71441d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"78f2be33186ca28327bbd30851182ec6ee649c4ccc4627269e5c364b4a71441d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78f2be33186ca28327bbd30851182ec6ee649c4ccc4627269e5c364b4a71441d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78f2be33186ca28327bbd30851182ec6ee649c4ccc4627269e5c364b4a71441d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78f2be33186ca28327bbd30851182ec6ee649c4ccc4627269e5c364b4a71441d"} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78f2be33186ca28327bbd30851182ec6ee649c4ccc4627269e5c364b4a71441d"} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bf75977fe0d95d196375902c415b9bbaaa50ba917d06422769fabd774d93532","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bf75977fe0d95d196375902c415b9bbaaa50ba917d06422769fabd774d93532","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bf75977fe0d95d196375902c415b9bbaaa50ba917d06422769fabd774d93532","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bf75977fe0d95d196375902c415b9bbaaa50ba917d06422769fabd774d93532","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78f2be33186ca28327bbd30851182ec6ee649c4ccc4627269e5c364b4a71441d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78f2be33186ca28327bbd30851182ec6ee649c4ccc4627269e5c364b4a71441d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bf75977fe0d95d196375902c415b9bbaaa50ba917d06422769fabd774d93532"} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78f2be33186ca28327bbd30851182ec6ee649c4ccc4627269e5c364b4a71441d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78f2be33186ca28327bbd30851182ec6ee649c4ccc4627269e5c364b4a71441d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bf75977fe0d95d196375902c415b9bbaaa50ba917d06422769fabd774d93532","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bf75977fe0d95d196375902c415b9bbaaa50ba917d06422769fabd774d93532"} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78f2be33186ca28327bbd30851182ec6ee649c4ccc4627269e5c364b4a71441d"} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bf75977fe0d95d196375902c415b9bbaaa50ba917d06422769fabd774d93532","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bf75977fe0d95d196375902c415b9bbaaa50ba917d06422769fabd774d93532"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bf75977fe0d95d196375902c415b9bbaaa50ba917d06422769fabd774d93532","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3641e40481c54a73e2914e0dadfa9f2d61d14cf80cdc4dfe035140fcbd936928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3641e40481c54a73e2914e0dadfa9f2d61d14cf80cdc4dfe035140fcbd936928","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bf75977fe0d95d196375902c415b9bbaaa50ba917d06422769fabd774d93532","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3641e40481c54a73e2914e0dadfa9f2d61d14cf80cdc4dfe035140fcbd936928","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3641e40481c54a73e2914e0dadfa9f2d61d14cf80cdc4dfe035140fcbd936928","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3641e40481c54a73e2914e0dadfa9f2d61d14cf80cdc4dfe035140fcbd936928"} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3641e40481c54a73e2914e0dadfa9f2d61d14cf80cdc4dfe035140fcbd936928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3641e40481c54a73e2914e0dadfa9f2d61d14cf80cdc4dfe035140fcbd936928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bf75977fe0d95d196375902c415b9bbaaa50ba917d06422769fabd774d93532"} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3641e40481c54a73e2914e0dadfa9f2d61d14cf80cdc4dfe035140fcbd936928","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3641e40481c54a73e2914e0dadfa9f2d61d14cf80cdc4dfe035140fcbd936928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3641e40481c54a73e2914e0dadfa9f2d61d14cf80cdc4dfe035140fcbd936928"} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3641e40481c54a73e2914e0dadfa9f2d61d14cf80cdc4dfe035140fcbd936928","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3641e40481c54a73e2914e0dadfa9f2d61d14cf80cdc4dfe035140fcbd936928","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3641e40481c54a73e2914e0dadfa9f2d61d14cf80cdc4dfe035140fcbd936928","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3641e40481c54a73e2914e0dadfa9f2d61d14cf80cdc4dfe035140fcbd936928"} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3641e40481c54a73e2914e0dadfa9f2d61d14cf80cdc4dfe035140fcbd936928","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d57ea979f8cb88109a5c689661b4ef27df740a2d9bbcc29bfa83c9d920106dd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3641e40481c54a73e2914e0dadfa9f2d61d14cf80cdc4dfe035140fcbd936928"} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d57ea979f8cb88109a5c689661b4ef27df740a2d9bbcc29bfa83c9d920106dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d57ea979f8cb88109a5c689661b4ef27df740a2d9bbcc29bfa83c9d920106dd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d57ea979f8cb88109a5c689661b4ef27df740a2d9bbcc29bfa83c9d920106dd3"} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d57ea979f8cb88109a5c689661b4ef27df740a2d9bbcc29bfa83c9d920106dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9"} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3641e40481c54a73e2914e0dadfa9f2d61d14cf80cdc4dfe035140fcbd936928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3641e40481c54a73e2914e0dadfa9f2d61d14cf80cdc4dfe035140fcbd936928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3641e40481c54a73e2914e0dadfa9f2d61d14cf80cdc4dfe035140fcbd936928","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d57ea979f8cb88109a5c689661b4ef27df740a2d9bbcc29bfa83c9d920106dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d57ea979f8cb88109a5c689661b4ef27df740a2d9bbcc29bfa83c9d920106dd3"} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3641e40481c54a73e2914e0dadfa9f2d61d14cf80cdc4dfe035140fcbd936928","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9"} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d57ea979f8cb88109a5c689661b4ef27df740a2d9bbcc29bfa83c9d920106dd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d57ea979f8cb88109a5c689661b4ef27df740a2d9bbcc29bfa83c9d920106dd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d57ea979f8cb88109a5c689661b4ef27df740a2d9bbcc29bfa83c9d920106dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3641e40481c54a73e2914e0dadfa9f2d61d14cf80cdc4dfe035140fcbd936928"} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d57ea979f8cb88109a5c689661b4ef27df740a2d9bbcc29bfa83c9d920106dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9"} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d57ea979f8cb88109a5c689661b4ef27df740a2d9bbcc29bfa83c9d920106dd3"} {"level":"error","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9"} {"level":"error","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1fa59e092fa5017307826d9f7cbd62af8397284ae7cf8bc79b51eea26f0bd6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9"} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1fa59e092fa5017307826d9f7cbd62af8397284ae7cf8bc79b51eea26f0bd6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e830f0044a72cd2075db3c599e0c55f0e62995b121fa8e8a3fbfa276a11820ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1fa59e092fa5017307826d9f7cbd62af8397284ae7cf8bc79b51eea26f0bd6b"} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e830f0044a72cd2075db3c599e0c55f0e62995b121fa8e8a3fbfa276a11820ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1fa59e092fa5017307826d9f7cbd62af8397284ae7cf8bc79b51eea26f0bd6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1fa59e092fa5017307826d9f7cbd62af8397284ae7cf8bc79b51eea26f0bd6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1fa59e092fa5017307826d9f7cbd62af8397284ae7cf8bc79b51eea26f0bd6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e830f0044a72cd2075db3c599e0c55f0e62995b121fa8e8a3fbfa276a11820ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e830f0044a72cd2075db3c599e0c55f0e62995b121fa8e8a3fbfa276a11820ba"} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e830f0044a72cd2075db3c599e0c55f0e62995b121fa8e8a3fbfa276a11820ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1fa59e092fa5017307826d9f7cbd62af8397284ae7cf8bc79b51eea26f0bd6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1fa59e092fa5017307826d9f7cbd62af8397284ae7cf8bc79b51eea26f0bd6b"} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1fa59e092fa5017307826d9f7cbd62af8397284ae7cf8bc79b51eea26f0bd6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e830f0044a72cd2075db3c599e0c55f0e62995b121fa8e8a3fbfa276a11820ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1fa59e092fa5017307826d9f7cbd62af8397284ae7cf8bc79b51eea26f0bd6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1fa59e092fa5017307826d9f7cbd62af8397284ae7cf8bc79b51eea26f0bd6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e830f0044a72cd2075db3c599e0c55f0e62995b121fa8e8a3fbfa276a11820ba"} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1fa59e092fa5017307826d9f7cbd62af8397284ae7cf8bc79b51eea26f0bd6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e830f0044a72cd2075db3c599e0c55f0e62995b121fa8e8a3fbfa276a11820ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e830f0044a72cd2075db3c599e0c55f0e62995b121fa8e8a3fbfa276a11820ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e830f0044a72cd2075db3c599e0c55f0e62995b121fa8e8a3fbfa276a11820ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1fa59e092fa5017307826d9f7cbd62af8397284ae7cf8bc79b51eea26f0bd6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1fa59e092fa5017307826d9f7cbd62af8397284ae7cf8bc79b51eea26f0bd6b"} {"level":"info","ts":"2026-07-07T00:34:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1fa59e092fa5017307826d9f7cbd62af8397284ae7cf8bc79b51eea26f0bd6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e830f0044a72cd2075db3c599e0c55f0e62995b121fa8e8a3fbfa276a11820ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1fa59e092fa5017307826d9f7cbd62af8397284ae7cf8bc79b51eea26f0bd6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1fa59e092fa5017307826d9f7cbd62af8397284ae7cf8bc79b51eea26f0bd6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9"} {"level":"info","ts":"2026-07-07T00:34:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1fa59e092fa5017307826d9f7cbd62af8397284ae7cf8bc79b51eea26f0bd6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1fa59e092fa5017307826d9f7cbd62af8397284ae7cf8bc79b51eea26f0bd6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1fa59e092fa5017307826d9f7cbd62af8397284ae7cf8bc79b51eea26f0bd6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T00:34:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f1fa59e092fa5017307826d9f7cbd62af8397284ae7cf8bc79b51eea26f0bd6b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f1fa59e092fa5017307826d9f7cbd62af8397284ae7cf8bc79b51eea26f0bd6b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T00:34:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1fa59e092fa5017307826d9f7cbd62af8397284ae7cf8bc79b51eea26f0bd6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1fa59e092fa5017307826d9f7cbd62af8397284ae7cf8bc79b51eea26f0bd6b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:34:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e830f0044a72cd2075db3c599e0c55f0e62995b121fa8e8a3fbfa276a11820ba"} {"level":"info","ts":"2026-07-07T00:34:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1fa59e092fa5017307826d9f7cbd62af8397284ae7cf8bc79b51eea26f0bd6b"} {"level":"debug","ts":"2026-07-07T00:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bf75977fe0d95d196375902c415b9bbaaa50ba917d06422769fabd774d93532","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bf75977fe0d95d196375902c415b9bbaaa50ba917d06422769fabd774d93532","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bf75977fe0d95d196375902c415b9bbaaa50ba917d06422769fabd774d93532","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bf75977fe0d95d196375902c415b9bbaaa50ba917d06422769fabd774d93532","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bf75977fe0d95d196375902c415b9bbaaa50ba917d06422769fabd774d93532"} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bf75977fe0d95d196375902c415b9bbaaa50ba917d06422769fabd774d93532","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bf75977fe0d95d196375902c415b9bbaaa50ba917d06422769fabd774d93532"} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bf75977fe0d95d196375902c415b9bbaaa50ba917d06422769fabd774d93532","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bf75977fe0d95d196375902c415b9bbaaa50ba917d06422769fabd774d93532"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bf75977fe0d95d196375902c415b9bbaaa50ba917d06422769fabd774d93532","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bf75977fe0d95d196375902c415b9bbaaa50ba917d06422769fabd774d93532","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bf75977fe0d95d196375902c415b9bbaaa50ba917d06422769fabd774d93532","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1fa59e092fa5017307826d9f7cbd62af8397284ae7cf8bc79b51eea26f0bd6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bf75977fe0d95d196375902c415b9bbaaa50ba917d06422769fabd774d93532","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bf75977fe0d95d196375902c415b9bbaaa50ba917d06422769fabd774d93532","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bf75977fe0d95d196375902c415b9bbaaa50ba917d06422769fabd774d93532"} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bf75977fe0d95d196375902c415b9bbaaa50ba917d06422769fabd774d93532","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bf75977fe0d95d196375902c415b9bbaaa50ba917d06422769fabd774d93532"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bf75977fe0d95d196375902c415b9bbaaa50ba917d06422769fabd774d93532","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bf75977fe0d95d196375902c415b9bbaaa50ba917d06422769fabd774d93532","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1fa59e092fa5017307826d9f7cbd62af8397284ae7cf8bc79b51eea26f0bd6b"} {"level":"info","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bf75977fe0d95d196375902c415b9bbaaa50ba917d06422769fabd774d93532"} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132"} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132"} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132"} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fb77517fee7d660fd923d72eec388ee1382231ece0d2436d06255e6a9f4e604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fb77517fee7d660fd923d72eec388ee1382231ece0d2436d06255e6a9f4e604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fb77517fee7d660fd923d72eec388ee1382231ece0d2436d06255e6a9f4e604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fb77517fee7d660fd923d72eec388ee1382231ece0d2436d06255e6a9f4e604","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fb77517fee7d660fd923d72eec388ee1382231ece0d2436d06255e6a9f4e604"} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fb77517fee7d660fd923d72eec388ee1382231ece0d2436d06255e6a9f4e604","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fb77517fee7d660fd923d72eec388ee1382231ece0d2436d06255e6a9f4e604"} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fb77517fee7d660fd923d72eec388ee1382231ece0d2436d06255e6a9f4e604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fb77517fee7d660fd923d72eec388ee1382231ece0d2436d06255e6a9f4e604"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fb77517fee7d660fd923d72eec388ee1382231ece0d2436d06255e6a9f4e604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fb77517fee7d660fd923d72eec388ee1382231ece0d2436d06255e6a9f4e604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa02fe0391deef860079c4e1509342fab05b3e63499b4906e71ac9d7cb494a45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caada3a7ad71ce8252335f5d621c319b0e58264a60e85b1c1c977c4db8bd34b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fb77517fee7d660fd923d72eec388ee1382231ece0d2436d06255e6a9f4e604"} {"level":"info","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa02fe0391deef860079c4e1509342fab05b3e63499b4906e71ac9d7cb494a45"} {"level":"info","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caada3a7ad71ce8252335f5d621c319b0e58264a60e85b1c1c977c4db8bd34b5"} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f54fc6a41ccb4463742fd6db8c0ce90f63812023405c8f0108d85d6f88d24e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f54fc6a41ccb4463742fd6db8c0ce90f63812023405c8f0108d85d6f88d24e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94f54fc6a41ccb4463742fd6db8c0ce90f63812023405c8f0108d85d6f88d24e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a82d8bfc05e49f3bbcf63bf1ad6265732ab4e19fd99e1edd493c74dbaca1da0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94f54fc6a41ccb4463742fd6db8c0ce90f63812023405c8f0108d85d6f88d24e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f54fc6a41ccb4463742fd6db8c0ce90f63812023405c8f0108d85d6f88d24e"} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1161527a9036b7475c2237a0075558ee5de6c1c78ecb8a92fa8320dbd74d4ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f54fc6a41ccb4463742fd6db8c0ce90f63812023405c8f0108d85d6f88d24e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94f54fc6a41ccb4463742fd6db8c0ce90f63812023405c8f0108d85d6f88d24e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a82d8bfc05e49f3bbcf63bf1ad6265732ab4e19fd99e1edd493c74dbaca1da0"} {"level":"info","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f54fc6a41ccb4463742fd6db8c0ce90f63812023405c8f0108d85d6f88d24e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14aedfa6d260504741740f61150e6b6ef6ed48fa5c50e3cd67939ec6900e48d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f54fc6a41ccb4463742fd6db8c0ce90f63812023405c8f0108d85d6f88d24e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f54fc6a41ccb4463742fd6db8c0ce90f63812023405c8f0108d85d6f88d24e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94f54fc6a41ccb4463742fd6db8c0ce90f63812023405c8f0108d85d6f88d24e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f54fc6a41ccb4463742fd6db8c0ce90f63812023405c8f0108d85d6f88d24e"} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f54fc6a41ccb4463742fd6db8c0ce90f63812023405c8f0108d85d6f88d24e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94f54fc6a41ccb4463742fd6db8c0ce90f63812023405c8f0108d85d6f88d24e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f54fc6a41ccb4463742fd6db8c0ce90f63812023405c8f0108d85d6f88d24e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94f54fc6a41ccb4463742fd6db8c0ce90f63812023405c8f0108d85d6f88d24e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1161527a9036b7475c2237a0075558ee5de6c1c78ecb8a92fa8320dbd74d4ed"} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d57ea979f8cb88109a5c689661b4ef27df740a2d9bbcc29bfa83c9d920106dd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14aedfa6d260504741740f61150e6b6ef6ed48fa5c50e3cd67939ec6900e48d1"} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21411d414d646397e77fcea3c0600b1e746febaaa429c8cd9b048601496eefcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75900b16015700e044df79e70049afb826c08e31dca9ca8ebeae98a9ebcbe31e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9"} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"031438b48555417cb802db9c93502bae42689d2a494360bd15e1df3277258850","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f54fc6a41ccb4463742fd6db8c0ce90f63812023405c8f0108d85d6f88d24e"} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d57ea979f8cb88109a5c689661b4ef27df740a2d9bbcc29bfa83c9d920106dd3"} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78f2be33186ca28327bbd30851182ec6ee649c4ccc4627269e5c364b4a71441d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21411d414d646397e77fcea3c0600b1e746febaaa429c8cd9b048601496eefcc"} {"level":"debug","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98c357a912a195cdb7e1c4f326d7f5bf011111c2d356fb833346d8d0680294f4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75900b16015700e044df79e70049afb826c08e31dca9ca8ebeae98a9ebcbe31e"} {"level":"info","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/031438b48555417cb802db9c93502bae42689d2a494360bd15e1df3277258850"} {"level":"info","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36"} {"level":"info","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78f2be33186ca28327bbd30851182ec6ee649c4ccc4627269e5c364b4a71441d"} {"level":"debug","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e830f0044a72cd2075db3c599e0c55f0e62995b121fa8e8a3fbfa276a11820ba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c357a912a195cdb7e1c4f326d7f5bf011111c2d356fb833346d8d0680294f4"} {"level":"debug","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a9ea4d61035a4af9c8059968ab187bfcae08559b0d548510145f3a3f8a602f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6561ae2232d5ae9b6d64b10c52eb289e61c90f40a460f287419b0246d27d1cdd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e830f0044a72cd2075db3c599e0c55f0e62995b121fa8e8a3fbfa276a11820ba"} {"level":"debug","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3641e40481c54a73e2914e0dadfa9f2d61d14cf80cdc4dfe035140fcbd936928","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a9ea4d61035a4af9c8059968ab187bfcae08559b0d548510145f3a3f8a602f1"} {"level":"debug","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74bc932726e5fd128020d078160b33e81091f3aa8a9f7c2d5560cabb3fe25279","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6561ae2232d5ae9b6d64b10c52eb289e61c90f40a460f287419b0246d27d1cdd"} {"level":"debug","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cb73f42c9b13acced4bb751dc929d4faf7ea73022602056461505eaab408706","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3641e40481c54a73e2914e0dadfa9f2d61d14cf80cdc4dfe035140fcbd936928"} {"level":"info","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74bc932726e5fd128020d078160b33e81091f3aa8a9f7c2d5560cabb3fe25279"} {"level":"info","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cb73f42c9b13acced4bb751dc929d4faf7ea73022602056461505eaab408706"} {"level":"info","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41371459-a17d-45a4-94d3-e593335452e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39962","PortSpecifier":{"PortValue":39962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"41371459-a17d-45a4-94d3-e593335452e6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41371459-a17d-45a4-94d3-e593335452e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39962","PortSpecifier":{"PortValue":39962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384476,"nanos":211302524},"http":{"id":"41371459-a17d-45a4-94d3-e593335452e6","method":"POST","headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"41371459-a17d-45a4-94d3-e593335452e6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"41371459-a17d-45a4-94d3-e593335452e6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"]}} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"41371459-a17d-45a4-94d3-e593335452e6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6561ae2232d5ae9b6d64b10c52eb289e61c90f40a460f287419b0246d27d1cdd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41371459-a17d-45a4-94d3-e593335452e6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41371459-a17d-45a4-94d3-e593335452e6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41371459-a17d-45a4-94d3-e593335452e6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ea3965/sub-test-model-ea3965\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"41371459-a17d-45a4-94d3-e593335452e6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41371459-a17d-45a4-94d3-e593335452e6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41371459-a17d-45a4-94d3-e593335452e6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41371459-a17d-45a4-94d3-e593335452e6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41371459-a17d-45a4-94d3-e593335452e6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d79f6e6-3e64-4135-8809-ad6d16718282","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41010","PortSpecifier":{"PortValue":41010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d79f6e6-3e64-4135-8809-ad6d16718282","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d79f6e6-3e64-4135-8809-ad6d16718282","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41010","PortSpecifier":{"PortValue":41010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384476,"nanos":250278411},"http":{"id":"8d79f6e6-3e64-4135-8809-ad6d16718282","method":"POST","headers":{":authority":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8d79f6e6-3e64-4135-8809-ad6d16718282","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d79f6e6-3e64-4135-8809-ad6d16718282","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"]}} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d79f6e6-3e64-4135-8809-ad6d16718282","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21411d414d646397e77fcea3c0600b1e746febaaa429c8cd9b048601496eefcc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d79f6e6-3e64-4135-8809-ad6d16718282","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d79f6e6-3e64-4135-8809-ad6d16718282","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d79f6e6-3e64-4135-8809-ad6d16718282","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e15ad3/sub-test-model-e15ad3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8d79f6e6-3e64-4135-8809-ad6d16718282","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d79f6e6-3e64-4135-8809-ad6d16718282","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d79f6e6-3e64-4135-8809-ad6d16718282","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d79f6e6-3e64-4135-8809-ad6d16718282","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d79f6e6-3e64-4135-8809-ad6d16718282","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27074b00-3b94-47cb-aed1-5f8e574fc13f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39970","PortSpecifier":{"PortValue":39970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27074b00-3b94-47cb-aed1-5f8e574fc13f","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27074b00-3b94-47cb-aed1-5f8e574fc13f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39970","PortSpecifier":{"PortValue":39970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384476,"nanos":290510717},"http":{"id":"27074b00-3b94-47cb-aed1-5f8e574fc13f","method":"GET","headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27074b00-3b94-47cb-aed1-5f8e574fc13f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PX0wfdd9fHGP7wq9_ZGjyFRqAQePK1SMDsAJWrOBNiDSwNjA9Su1z1GvZw9t"} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"27074b00-3b94-47cb-aed1-5f8e574fc13f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ea3965.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PX0wfdd9fHGP7wq9_ZGjyFRqAQePK1SMDsAJWrOBNiDSwNjA9Su1z1GvZw9t\"}"} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"27074b00-3b94-47cb-aed1-5f8e574fc13f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ea3965.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"740fecf3-da90-4023-99da-0647489b2eaf","keyName":"e2e-sub-iso-5cfe38","subscription":"e2e-a-only-e1ecde","tenant":"e2e-shared-a-ea3965","userId":"740fecf3-da90-4023-99da-0647489b2eaf","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27074b00-3b94-47cb-aed1-5f8e574fc13f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27074b00-3b94-47cb-aed1-5f8e574fc13f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27074b00-3b94-47cb-aed1-5f8e574fc13f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27074b00-3b94-47cb-aed1-5f8e574fc13f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ea3965/sub-test-model-ea3965\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27074b00-3b94-47cb-aed1-5f8e574fc13f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27074b00-3b94-47cb-aed1-5f8e574fc13f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-e1ecde"} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27074b00-3b94-47cb-aed1-5f8e574fc13f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"27074b00-3b94-47cb-aed1-5f8e574fc13f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27074b00-3b94-47cb-aed1-5f8e574fc13f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27074b00-3b94-47cb-aed1-5f8e574fc13f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3aac5c0-2da3-4144-a68f-fdcf2e0506a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60306","PortSpecifier":{"PortValue":60306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d3aac5c0-2da3-4144-a68f-fdcf2e0506a6","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3aac5c0-2da3-4144-a68f-fdcf2e0506a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60306","PortSpecifier":{"PortValue":60306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384476,"nanos":329289174},"http":{"id":"d3aac5c0-2da3-4144-a68f-fdcf2e0506a6","method":"GET","headers":{":authority":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d3aac5c0-2da3-4144-a68f-fdcf2e0506a6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-NId5W4i0pFUgQhEs_whM7UuQxcE62VQKrtPZ0j51nQPAHcEEvoHFxEikXKYn"} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d3aac5c0-2da3-4144-a68f-fdcf2e0506a6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e15ad3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-NId5W4i0pFUgQhEs_whM7UuQxcE62VQKrtPZ0j51nQPAHcEEvoHFxEikXKYn\"}"} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d3aac5c0-2da3-4144-a68f-fdcf2e0506a6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e15ad3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"968499e0-4797-4dde-9ec9-7be2446eb4bc","keyName":"e2e-sub-iso-1d9072","subscription":"e2e-b-only-e1ecde","tenant":"e2e-shared-b-e15ad3","userId":"968499e0-4797-4dde-9ec9-7be2446eb4bc","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d3aac5c0-2da3-4144-a68f-fdcf2e0506a6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3aac5c0-2da3-4144-a68f-fdcf2e0506a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3aac5c0-2da3-4144-a68f-fdcf2e0506a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3aac5c0-2da3-4144-a68f-fdcf2e0506a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e15ad3/sub-test-model-e15ad3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d3aac5c0-2da3-4144-a68f-fdcf2e0506a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3aac5c0-2da3-4144-a68f-fdcf2e0506a6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3aac5c0-2da3-4144-a68f-fdcf2e0506a6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3aac5c0-2da3-4144-a68f-fdcf2e0506a6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-e1ecde"} {"level":"info","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3aac5c0-2da3-4144-a68f-fdcf2e0506a6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:34:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3aac5c0-2da3-4144-a68f-fdcf2e0506a6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dabf3afa-7b31-480c-b8cf-62af47345041","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55698","PortSpecifier":{"PortValue":55698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dabf3afa-7b31-480c-b8cf-62af47345041","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dabf3afa-7b31-480c-b8cf-62af47345041","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55698","PortSpecifier":{"PortValue":55698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384495,"nanos":53123356},"http":{"id":"dabf3afa-7b31-480c-b8cf-62af47345041","method":"POST","headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dabf3afa-7b31-480c-b8cf-62af47345041","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dabf3afa-7b31-480c-b8cf-62af47345041","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"]}} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dabf3afa-7b31-480c-b8cf-62af47345041","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6561ae2232d5ae9b6d64b10c52eb289e61c90f40a460f287419b0246d27d1cdd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dabf3afa-7b31-480c-b8cf-62af47345041","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dabf3afa-7b31-480c-b8cf-62af47345041","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dabf3afa-7b31-480c-b8cf-62af47345041","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ea3965/sub-test-model-ea3965\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dabf3afa-7b31-480c-b8cf-62af47345041","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dabf3afa-7b31-480c-b8cf-62af47345041","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dabf3afa-7b31-480c-b8cf-62af47345041","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dabf3afa-7b31-480c-b8cf-62af47345041","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dabf3afa-7b31-480c-b8cf-62af47345041","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6032f287-69b1-4c5e-a333-493774620728","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:42188","PortSpecifier":{"PortValue":42188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6032f287-69b1-4c5e-a333-493774620728","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6032f287-69b1-4c5e-a333-493774620728","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:42188","PortSpecifier":{"PortValue":42188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384495,"nanos":89014864},"http":{"id":"6032f287-69b1-4c5e-a333-493774620728","method":"POST","headers":{":authority":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6032f287-69b1-4c5e-a333-493774620728","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6032f287-69b1-4c5e-a333-493774620728","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"]}} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6032f287-69b1-4c5e-a333-493774620728","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21411d414d646397e77fcea3c0600b1e746febaaa429c8cd9b048601496eefcc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6032f287-69b1-4c5e-a333-493774620728","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6032f287-69b1-4c5e-a333-493774620728","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6032f287-69b1-4c5e-a333-493774620728","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e15ad3/sub-test-model-e15ad3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6032f287-69b1-4c5e-a333-493774620728","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6032f287-69b1-4c5e-a333-493774620728","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6032f287-69b1-4c5e-a333-493774620728","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6032f287-69b1-4c5e-a333-493774620728","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6032f287-69b1-4c5e-a333-493774620728","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd7c4e4b-3420-4d5e-9879-91883417d2e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55708","PortSpecifier":{"PortValue":55708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd7c4e4b-3420-4d5e-9879-91883417d2e6","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd7c4e4b-3420-4d5e-9879-91883417d2e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55708","PortSpecifier":{"PortValue":55708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384495,"nanos":119880858},"http":{"id":"fd7c4e4b-3420-4d5e-9879-91883417d2e6","method":"POST","headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd7c4e4b-3420-4d5e-9879-91883417d2e6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AwjAMilWAc0eA7Lr_ta6Q4GkyHQmjal1KXWnqLuOlRPERZC5sr41EuRGU3sU"} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fd7c4e4b-3420-4d5e-9879-91883417d2e6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ea3965.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AwjAMilWAc0eA7Lr_ta6Q4GkyHQmjal1KXWnqLuOlRPERZC5sr41EuRGU3sU\"}"} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fd7c4e4b-3420-4d5e-9879-91883417d2e6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ea3965.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"895eff32-7ed5-4c7c-a65e-0b0d7728c2f7","keyName":"e2e-sub-iso-6efe41","subscription":"e2e-shared-sub-799900","tenant":"e2e-shared-a-ea3965","userId":"895eff32-7ed5-4c7c-a65e-0b0d7728c2f7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd7c4e4b-3420-4d5e-9879-91883417d2e6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd7c4e4b-3420-4d5e-9879-91883417d2e6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd7c4e4b-3420-4d5e-9879-91883417d2e6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd7c4e4b-3420-4d5e-9879-91883417d2e6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ea3965/sub-test-model-ea3965\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd7c4e4b-3420-4d5e-9879-91883417d2e6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd7c4e4b-3420-4d5e-9879-91883417d2e6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd7c4e4b-3420-4d5e-9879-91883417d2e6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-799900"} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fd7c4e4b-3420-4d5e-9879-91883417d2e6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd7c4e4b-3420-4d5e-9879-91883417d2e6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd7c4e4b-3420-4d5e-9879-91883417d2e6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee7c4025-65e6-4924-8b21-ab517fa9ab6b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:42196","PortSpecifier":{"PortValue":42196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ee7c4025-65e6-4924-8b21-ab517fa9ab6b","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee7c4025-65e6-4924-8b21-ab517fa9ab6b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:42196","PortSpecifier":{"PortValue":42196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384495,"nanos":148557538},"http":{"id":"ee7c4025-65e6-4924-8b21-ab517fa9ab6b","method":"POST","headers":{":authority":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ee7c4025-65e6-4924-8b21-ab517fa9ab6b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YOQFNMEBmXbHzaa2_pKuUrXMBKAlzTOcl6DC845jnK8gvOTYpcz0iphJyqgG"} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ee7c4025-65e6-4924-8b21-ab517fa9ab6b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e15ad3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YOQFNMEBmXbHzaa2_pKuUrXMBKAlzTOcl6DC845jnK8gvOTYpcz0iphJyqgG\"}"} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ee7c4025-65e6-4924-8b21-ab517fa9ab6b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e15ad3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"62fa48c9-a93f-4ac5-a5cb-34997f339132","keyName":"e2e-sub-iso-2d0448","subscription":"e2e-shared-sub-799900","tenant":"e2e-shared-b-e15ad3","userId":"62fa48c9-a93f-4ac5-a5cb-34997f339132","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ee7c4025-65e6-4924-8b21-ab517fa9ab6b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee7c4025-65e6-4924-8b21-ab517fa9ab6b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee7c4025-65e6-4924-8b21-ab517fa9ab6b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee7c4025-65e6-4924-8b21-ab517fa9ab6b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e15ad3/sub-test-model-e15ad3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ee7c4025-65e6-4924-8b21-ab517fa9ab6b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee7c4025-65e6-4924-8b21-ab517fa9ab6b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee7c4025-65e6-4924-8b21-ab517fa9ab6b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-799900"} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee7c4025-65e6-4924-8b21-ab517fa9ab6b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee7c4025-65e6-4924-8b21-ab517fa9ab6b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:34:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee7c4025-65e6-4924-8b21-ab517fa9ab6b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/258c4a68c9df5107b593dbce54f978e12b914e31751c93a964be45e483b80c36"} {"level":"info","ts":"2026-07-07T00:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78f2be33186ca28327bbd30851182ec6ee649c4ccc4627269e5c364b4a71441d"} {"level":"info","ts":"2026-07-07T00:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62fc169e0856fd1511e5a89d6919a7b16997e949cdaf0c8e8ed8db0dc544a8d9"} {"level":"info","ts":"2026-07-07T00:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e830f0044a72cd2075db3c599e0c55f0e62995b121fa8e8a3fbfa276a11820ba"} {"level":"info","ts":"2026-07-07T00:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa02fe0391deef860079c4e1509342fab05b3e63499b4906e71ac9d7cb494a45"} {"level":"info","ts":"2026-07-07T00:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3641e40481c54a73e2914e0dadfa9f2d61d14cf80cdc4dfe035140fcbd936928"} {"level":"info","ts":"2026-07-07T00:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/caada3a7ad71ce8252335f5d621c319b0e58264a60e85b1c1c977c4db8bd34b5"} {"level":"info","ts":"2026-07-07T00:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8cb73f42c9b13acced4bb751dc929d4faf7ea73022602056461505eaab408706"} {"level":"info","ts":"2026-07-07T00:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a9ea4d61035a4af9c8059968ab187bfcae08559b0d548510145f3a3f8a602f1"} {"level":"info","ts":"2026-07-07T00:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98c357a912a195cdb7e1c4f326d7f5bf011111c2d356fb833346d8d0680294f4"} {"level":"info","ts":"2026-07-07T00:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9bf75977fe0d95d196375902c415b9bbaaa50ba917d06422769fabd774d93532"} {"level":"info","ts":"2026-07-07T00:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d57ea979f8cb88109a5c689661b4ef27df740a2d9bbcc29bfa83c9d920106dd3"} {"level":"info","ts":"2026-07-07T00:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a2aa0d16a9f8989fe4254f3774774117d49e5a9a11455c2079410454b07c132"} {"level":"info","ts":"2026-07-07T00:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a82d8bfc05e49f3bbcf63bf1ad6265732ab4e19fd99e1edd493c74dbaca1da0"} {"level":"info","ts":"2026-07-07T00:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/94f54fc6a41ccb4463742fd6db8c0ce90f63812023405c8f0108d85d6f88d24e"} {"level":"info","ts":"2026-07-07T00:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1fa59e092fa5017307826d9f7cbd62af8397284ae7cf8bc79b51eea26f0bd6b"} {"level":"debug","ts":"2026-07-07T00:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826"} {"level":"info","ts":"2026-07-07T00:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T00:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T00:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826"} {"level":"info","ts":"2026-07-07T00:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826"} {"level":"debug","ts":"2026-07-07T00:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826"} {"level":"debug","ts":"2026-07-07T00:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826"} {"level":"debug","ts":"2026-07-07T00:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826"} {"level":"debug","ts":"2026-07-07T00:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826"} {"level":"debug","ts":"2026-07-07T00:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8e11af63d6bc4243240cf5758e6baa24b09bf0fabf0d8de51fa164cf89386fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8e11af63d6bc4243240cf5758e6baa24b09bf0fabf0d8de51fa164cf89386fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8e11af63d6bc4243240cf5758e6baa24b09bf0fabf0d8de51fa164cf89386fa"} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8e11af63d6bc4243240cf5758e6baa24b09bf0fabf0d8de51fa164cf89386fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8e11af63d6bc4243240cf5758e6baa24b09bf0fabf0d8de51fa164cf89386fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8e11af63d6bc4243240cf5758e6baa24b09bf0fabf0d8de51fa164cf89386fa"} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8e11af63d6bc4243240cf5758e6baa24b09bf0fabf0d8de51fa164cf89386fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8e11af63d6bc4243240cf5758e6baa24b09bf0fabf0d8de51fa164cf89386fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826"} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8e11af63d6bc4243240cf5758e6baa24b09bf0fabf0d8de51fa164cf89386fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8e11af63d6bc4243240cf5758e6baa24b09bf0fabf0d8de51fa164cf89386fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8e11af63d6bc4243240cf5758e6baa24b09bf0fabf0d8de51fa164cf89386fa"} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4d9131a441045b35e4592dc529b826b75a05d2ff59da15338f928f9fa956569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4d9131a441045b35e4592dc529b826b75a05d2ff59da15338f928f9fa956569","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4d9131a441045b35e4592dc529b826b75a05d2ff59da15338f928f9fa956569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4d9131a441045b35e4592dc529b826b75a05d2ff59da15338f928f9fa956569"} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4d9131a441045b35e4592dc529b826b75a05d2ff59da15338f928f9fa956569","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4d9131a441045b35e4592dc529b826b75a05d2ff59da15338f928f9fa956569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c4d9131a441045b35e4592dc529b826b75a05d2ff59da15338f928f9fa956569","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c4d9131a441045b35e4592dc529b826b75a05d2ff59da15338f928f9fa956569\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4d9131a441045b35e4592dc529b826b75a05d2ff59da15338f928f9fa956569","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4d9131a441045b35e4592dc529b826b75a05d2ff59da15338f928f9fa956569","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4d9131a441045b35e4592dc529b826b75a05d2ff59da15338f928f9fa956569"} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4d9131a441045b35e4592dc529b826b75a05d2ff59da15338f928f9fa956569"} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6af40cd7c0eddafbc3ffc3227f824967355ffc6849a029fd96ef055273d5f6df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6af40cd7c0eddafbc3ffc3227f824967355ffc6849a029fd96ef055273d5f6df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6af40cd7c0eddafbc3ffc3227f824967355ffc6849a029fd96ef055273d5f6df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4d9131a441045b35e4592dc529b826b75a05d2ff59da15338f928f9fa956569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4d9131a441045b35e4592dc529b826b75a05d2ff59da15338f928f9fa956569"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4d9131a441045b35e4592dc529b826b75a05d2ff59da15338f928f9fa956569","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6af40cd7c0eddafbc3ffc3227f824967355ffc6849a029fd96ef055273d5f6df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4d9131a441045b35e4592dc529b826b75a05d2ff59da15338f928f9fa956569","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6af40cd7c0eddafbc3ffc3227f824967355ffc6849a029fd96ef055273d5f6df"} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6af40cd7c0eddafbc3ffc3227f824967355ffc6849a029fd96ef055273d5f6df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6af40cd7c0eddafbc3ffc3227f824967355ffc6849a029fd96ef055273d5f6df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6af40cd7c0eddafbc3ffc3227f824967355ffc6849a029fd96ef055273d5f6df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6af40cd7c0eddafbc3ffc3227f824967355ffc6849a029fd96ef055273d5f6df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4d9131a441045b35e4592dc529b826b75a05d2ff59da15338f928f9fa956569"} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6af40cd7c0eddafbc3ffc3227f824967355ffc6849a029fd96ef055273d5f6df"} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231"} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231"} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"752bd30d8c49382a102973927937dae6f287af182dd290c6fe2128729b10358a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231"} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"752bd30d8c49382a102973927937dae6f287af182dd290c6fe2128729b10358a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/752bd30d8c49382a102973927937dae6f287af182dd290c6fe2128729b10358a"} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380c28ee897ca188ba254637bc51b266d5b6d72028e1ff2c5ee9053f74a04dc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231"} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380c28ee897ca188ba254637bc51b266d5b6d72028e1ff2c5ee9053f74a04dc0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"752bd30d8c49382a102973927937dae6f287af182dd290c6fe2128729b10358a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["752bd30d8c49382a102973927937dae6f287af182dd290c6fe2128729b10358a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380c28ee897ca188ba254637bc51b266d5b6d72028e1ff2c5ee9053f74a04dc0"} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/752bd30d8c49382a102973927937dae6f287af182dd290c6fe2128729b10358a"} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"752bd30d8c49382a102973927937dae6f287af182dd290c6fe2128729b10358a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231"} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380c28ee897ca188ba254637bc51b266d5b6d72028e1ff2c5ee9053f74a04dc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380c28ee897ca188ba254637bc51b266d5b6d72028e1ff2c5ee9053f74a04dc0"} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380c28ee897ca188ba254637bc51b266d5b6d72028e1ff2c5ee9053f74a04dc0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"752bd30d8c49382a102973927937dae6f287af182dd290c6fe2128729b10358a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/752bd30d8c49382a102973927937dae6f287af182dd290c6fe2128729b10358a"} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"752bd30d8c49382a102973927937dae6f287af182dd290c6fe2128729b10358a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380c28ee897ca188ba254637bc51b266d5b6d72028e1ff2c5ee9053f74a04dc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["380c28ee897ca188ba254637bc51b266d5b6d72028e1ff2c5ee9053f74a04dc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231"} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380c28ee897ca188ba254637bc51b266d5b6d72028e1ff2c5ee9053f74a04dc0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"752bd30d8c49382a102973927937dae6f287af182dd290c6fe2128729b10358a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["752bd30d8c49382a102973927937dae6f287af182dd290c6fe2128729b10358a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380c28ee897ca188ba254637bc51b266d5b6d72028e1ff2c5ee9053f74a04dc0"} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"752bd30d8c49382a102973927937dae6f287af182dd290c6fe2128729b10358a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ae95c5b21ba6d69b2bdbd9b11bdfda0d979e5e0005d1b97114247d9d5abcdc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/752bd30d8c49382a102973927937dae6f287af182dd290c6fe2128729b10358a"} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ae95c5b21ba6d69b2bdbd9b11bdfda0d979e5e0005d1b97114247d9d5abcdc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380c28ee897ca188ba254637bc51b266d5b6d72028e1ff2c5ee9053f74a04dc0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"752bd30d8c49382a102973927937dae6f287af182dd290c6fe2128729b10358a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ae95c5b21ba6d69b2bdbd9b11bdfda0d979e5e0005d1b97114247d9d5abcdc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ae95c5b21ba6d69b2bdbd9b11bdfda0d979e5e0005d1b97114247d9d5abcdc9"} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ae95c5b21ba6d69b2bdbd9b11bdfda0d979e5e0005d1b97114247d9d5abcdc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ae95c5b21ba6d69b2bdbd9b11bdfda0d979e5e0005d1b97114247d9d5abcdc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ae95c5b21ba6d69b2bdbd9b11bdfda0d979e5e0005d1b97114247d9d5abcdc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ae95c5b21ba6d69b2bdbd9b11bdfda0d979e5e0005d1b97114247d9d5abcdc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ae95c5b21ba6d69b2bdbd9b11bdfda0d979e5e0005d1b97114247d9d5abcdc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ae95c5b21ba6d69b2bdbd9b11bdfda0d979e5e0005d1b97114247d9d5abcdc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380c28ee897ca188ba254637bc51b266d5b6d72028e1ff2c5ee9053f74a04dc0"} {"level":"error","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8ae95c5b21ba6d69b2bdbd9b11bdfda0d979e5e0005d1b97114247d9d5abcdc9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8ae95c5b21ba6d69b2bdbd9b11bdfda0d979e5e0005d1b97114247d9d5abcdc9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ae95c5b21ba6d69b2bdbd9b11bdfda0d979e5e0005d1b97114247d9d5abcdc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ae95c5b21ba6d69b2bdbd9b11bdfda0d979e5e0005d1b97114247d9d5abcdc9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/752bd30d8c49382a102973927937dae6f287af182dd290c6fe2128729b10358a"} {"level":"info","ts":"2026-07-07T00:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231"} {"level":"info","ts":"2026-07-07T00:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ae95c5b21ba6d69b2bdbd9b11bdfda0d979e5e0005d1b97114247d9d5abcdc9"} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0550fe6dcb8bceb880e95b102502f4ef750ca8c64a6bfd9bdbb99c2325c99f6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0550fe6dcb8bceb880e95b102502f4ef750ca8c64a6bfd9bdbb99c2325c99f6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0550fe6dcb8bceb880e95b102502f4ef750ca8c64a6bfd9bdbb99c2325c99f6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0550fe6dcb8bceb880e95b102502f4ef750ca8c64a6bfd9bdbb99c2325c99f6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0550fe6dcb8bceb880e95b102502f4ef750ca8c64a6bfd9bdbb99c2325c99f6e"} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0550fe6dcb8bceb880e95b102502f4ef750ca8c64a6bfd9bdbb99c2325c99f6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0550fe6dcb8bceb880e95b102502f4ef750ca8c64a6bfd9bdbb99c2325c99f6e"} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0550fe6dcb8bceb880e95b102502f4ef750ca8c64a6bfd9bdbb99c2325c99f6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0550fe6dcb8bceb880e95b102502f4ef750ca8c64a6bfd9bdbb99c2325c99f6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0550fe6dcb8bceb880e95b102502f4ef750ca8c64a6bfd9bdbb99c2325c99f6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0550fe6dcb8bceb880e95b102502f4ef750ca8c64a6bfd9bdbb99c2325c99f6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0550fe6dcb8bceb880e95b102502f4ef750ca8c64a6bfd9bdbb99c2325c99f6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0550fe6dcb8bceb880e95b102502f4ef750ca8c64a6bfd9bdbb99c2325c99f6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0550fe6dcb8bceb880e95b102502f4ef750ca8c64a6bfd9bdbb99c2325c99f6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0550fe6dcb8bceb880e95b102502f4ef750ca8c64a6bfd9bdbb99c2325c99f6e"} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0550fe6dcb8bceb880e95b102502f4ef750ca8c64a6bfd9bdbb99c2325c99f6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0550fe6dcb8bceb880e95b102502f4ef750ca8c64a6bfd9bdbb99c2325c99f6e"} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0550fe6dcb8bceb880e95b102502f4ef750ca8c64a6bfd9bdbb99c2325c99f6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0550fe6dcb8bceb880e95b102502f4ef750ca8c64a6bfd9bdbb99c2325c99f6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0550fe6dcb8bceb880e95b102502f4ef750ca8c64a6bfd9bdbb99c2325c99f6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0550fe6dcb8bceb880e95b102502f4ef750ca8c64a6bfd9bdbb99c2325c99f6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0550fe6dcb8bceb880e95b102502f4ef750ca8c64a6bfd9bdbb99c2325c99f6e"} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b"} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b"} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b"} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b"} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b"} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a9c0ea5c1e0a8b1052aab40cbf6d2296230e10b76de5de79187370ea6348861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a9c0ea5c1e0a8b1052aab40cbf6d2296230e10b76de5de79187370ea6348861"} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a9c0ea5c1e0a8b1052aab40cbf6d2296230e10b76de5de79187370ea6348861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a9c0ea5c1e0a8b1052aab40cbf6d2296230e10b76de5de79187370ea6348861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a9c0ea5c1e0a8b1052aab40cbf6d2296230e10b76de5de79187370ea6348861"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b"} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a9c0ea5c1e0a8b1052aab40cbf6d2296230e10b76de5de79187370ea6348861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a9c0ea5c1e0a8b1052aab40cbf6d2296230e10b76de5de79187370ea6348861"} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a9c0ea5c1e0a8b1052aab40cbf6d2296230e10b76de5de79187370ea6348861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a9c0ea5c1e0a8b1052aab40cbf6d2296230e10b76de5de79187370ea6348861"} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a9c0ea5c1e0a8b1052aab40cbf6d2296230e10b76de5de79187370ea6348861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b"} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a9c0ea5c1e0a8b1052aab40cbf6d2296230e10b76de5de79187370ea6348861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a9c0ea5c1e0a8b1052aab40cbf6d2296230e10b76de5de79187370ea6348861"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d1489945cffda33c1b7557af0e0eeb524044cddca8c679b2136c23b91d2ed6e"} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a9c0ea5c1e0a8b1052aab40cbf6d2296230e10b76de5de79187370ea6348861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d1489945cffda33c1b7557af0e0eeb524044cddca8c679b2136c23b91d2ed6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d1489945cffda33c1b7557af0e0eeb524044cddca8c679b2136c23b91d2ed6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a9c0ea5c1e0a8b1052aab40cbf6d2296230e10b76de5de79187370ea6348861"} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d1489945cffda33c1b7557af0e0eeb524044cddca8c679b2136c23b91d2ed6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a9c0ea5c1e0a8b1052aab40cbf6d2296230e10b76de5de79187370ea6348861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d1489945cffda33c1b7557af0e0eeb524044cddca8c679b2136c23b91d2ed6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e684a6707a4a72730691087959772d3a25187603a5a94fcf05139e69eecc55f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e684a6707a4a72730691087959772d3a25187603a5a94fcf05139e69eecc55f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a9071b7fb9d142ead444427a9997911045695eac290c9231ef5820b0344842e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a9071b7fb9d142ead444427a9997911045695eac290c9231ef5820b0344842e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e684a6707a4a72730691087959772d3a25187603a5a94fcf05139e69eecc55f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a9071b7fb9d142ead444427a9997911045695eac290c9231ef5820b0344842e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b"} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a9071b7fb9d142ead444427a9997911045695eac290c9231ef5820b0344842e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e684a6707a4a72730691087959772d3a25187603a5a94fcf05139e69eecc55f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a9c0ea5c1e0a8b1052aab40cbf6d2296230e10b76de5de79187370ea6348861"} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a9071b7fb9d142ead444427a9997911045695eac290c9231ef5820b0344842e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e684a6707a4a72730691087959772d3a25187603a5a94fcf05139e69eecc55f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d1489945cffda33c1b7557af0e0eeb524044cddca8c679b2136c23b91d2ed6e"} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e684a6707a4a72730691087959772d3a25187603a5a94fcf05139e69eecc55f1"} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a9071b7fb9d142ead444427a9997911045695eac290c9231ef5820b0344842e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a9071b7fb9d142ead444427a9997911045695eac290c9231ef5820b0344842e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e684a6707a4a72730691087959772d3a25187603a5a94fcf05139e69eecc55f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e684a6707a4a72730691087959772d3a25187603a5a94fcf05139e69eecc55f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a9071b7fb9d142ead444427a9997911045695eac290c9231ef5820b0344842e"} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e684a6707a4a72730691087959772d3a25187603a5a94fcf05139e69eecc55f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a9071b7fb9d142ead444427a9997911045695eac290c9231ef5820b0344842e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a9071b7fb9d142ead444427a9997911045695eac290c9231ef5820b0344842e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a9071b7fb9d142ead444427a9997911045695eac290c9231ef5820b0344842e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e684a6707a4a72730691087959772d3a25187603a5a94fcf05139e69eecc55f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a9071b7fb9d142ead444427a9997911045695eac290c9231ef5820b0344842e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b"} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488"} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a9071b7fb9d142ead444427a9997911045695eac290c9231ef5820b0344842e"} {"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a9071b7fb9d142ead444427a9997911045695eac290c9231ef5820b0344842e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e684a6707a4a72730691087959772d3a25187603a5a94fcf05139e69eecc55f1"} {"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488"} {"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b"} {"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488"} {"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b"} {"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488"} {"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488"} {"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488"} {"level":"debug","ts":"2026-07-07T00:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d1489945cffda33c1b7557af0e0eeb524044cddca8c679b2136c23b91d2ed6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d1489945cffda33c1b7557af0e0eeb524044cddca8c679b2136c23b91d2ed6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d1489945cffda33c1b7557af0e0eeb524044cddca8c679b2136c23b91d2ed6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d1489945cffda33c1b7557af0e0eeb524044cddca8c679b2136c23b91d2ed6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d1489945cffda33c1b7557af0e0eeb524044cddca8c679b2136c23b91d2ed6e"} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d1489945cffda33c1b7557af0e0eeb524044cddca8c679b2136c23b91d2ed6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d1489945cffda33c1b7557af0e0eeb524044cddca8c679b2136c23b91d2ed6e"} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d1489945cffda33c1b7557af0e0eeb524044cddca8c679b2136c23b91d2ed6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d1489945cffda33c1b7557af0e0eeb524044cddca8c679b2136c23b91d2ed6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d1489945cffda33c1b7557af0e0eeb524044cddca8c679b2136c23b91d2ed6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1161527a9036b7475c2237a0075558ee5de6c1c78ecb8a92fa8320dbd74d4ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1161527a9036b7475c2237a0075558ee5de6c1c78ecb8a92fa8320dbd74d4ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d1489945cffda33c1b7557af0e0eeb524044cddca8c679b2136c23b91d2ed6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1161527a9036b7475c2237a0075558ee5de6c1c78ecb8a92fa8320dbd74d4ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1161527a9036b7475c2237a0075558ee5de6c1c78ecb8a92fa8320dbd74d4ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1161527a9036b7475c2237a0075558ee5de6c1c78ecb8a92fa8320dbd74d4ed"} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1161527a9036b7475c2237a0075558ee5de6c1c78ecb8a92fa8320dbd74d4ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1161527a9036b7475c2237a0075558ee5de6c1c78ecb8a92fa8320dbd74d4ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d1489945cffda33c1b7557af0e0eeb524044cddca8c679b2136c23b91d2ed6e"} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1161527a9036b7475c2237a0075558ee5de6c1c78ecb8a92fa8320dbd74d4ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1161527a9036b7475c2237a0075558ee5de6c1c78ecb8a92fa8320dbd74d4ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1161527a9036b7475c2237a0075558ee5de6c1c78ecb8a92fa8320dbd74d4ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1161527a9036b7475c2237a0075558ee5de6c1c78ecb8a92fa8320dbd74d4ed"} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1161527a9036b7475c2237a0075558ee5de6c1c78ecb8a92fa8320dbd74d4ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1161527a9036b7475c2237a0075558ee5de6c1c78ecb8a92fa8320dbd74d4ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1161527a9036b7475c2237a0075558ee5de6c1c78ecb8a92fa8320dbd74d4ed"} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1161527a9036b7475c2237a0075558ee5de6c1c78ecb8a92fa8320dbd74d4ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1161527a9036b7475c2237a0075558ee5de6c1c78ecb8a92fa8320dbd74d4ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1161527a9036b7475c2237a0075558ee5de6c1c78ecb8a92fa8320dbd74d4ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6af40cd7c0eddafbc3ffc3227f824967355ffc6849a029fd96ef055273d5f6df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6af40cd7c0eddafbc3ffc3227f824967355ffc6849a029fd96ef055273d5f6df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1161527a9036b7475c2237a0075558ee5de6c1c78ecb8a92fa8320dbd74d4ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6af40cd7c0eddafbc3ffc3227f824967355ffc6849a029fd96ef055273d5f6df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6af40cd7c0eddafbc3ffc3227f824967355ffc6849a029fd96ef055273d5f6df"} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6af40cd7c0eddafbc3ffc3227f824967355ffc6849a029fd96ef055273d5f6df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6af40cd7c0eddafbc3ffc3227f824967355ffc6849a029fd96ef055273d5f6df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6af40cd7c0eddafbc3ffc3227f824967355ffc6849a029fd96ef055273d5f6df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6af40cd7c0eddafbc3ffc3227f824967355ffc6849a029fd96ef055273d5f6df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1161527a9036b7475c2237a0075558ee5de6c1c78ecb8a92fa8320dbd74d4ed"} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6af40cd7c0eddafbc3ffc3227f824967355ffc6849a029fd96ef055273d5f6df"} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b"} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b"} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8e11af63d6bc4243240cf5758e6baa24b09bf0fabf0d8de51fa164cf89386fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b"} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8e11af63d6bc4243240cf5758e6baa24b09bf0fabf0d8de51fa164cf89386fa"} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b"} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b"} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b"} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826"} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b"} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b"} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"031438b48555417cb802db9c93502bae42689d2a494360bd15e1df3277258850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"031438b48555417cb802db9c93502bae42689d2a494360bd15e1df3277258850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"031438b48555417cb802db9c93502bae42689d2a494360bd15e1df3277258850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"031438b48555417cb802db9c93502bae42689d2a494360bd15e1df3277258850","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/031438b48555417cb802db9c93502bae42689d2a494360bd15e1df3277258850"} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"031438b48555417cb802db9c93502bae42689d2a494360bd15e1df3277258850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/031438b48555417cb802db9c93502bae42689d2a494360bd15e1df3277258850"} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b"} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"031438b48555417cb802db9c93502bae42689d2a494360bd15e1df3277258850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["031438b48555417cb802db9c93502bae42689d2a494360bd15e1df3277258850"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"031438b48555417cb802db9c93502bae42689d2a494360bd15e1df3277258850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"031438b48555417cb802db9c93502bae42689d2a494360bd15e1df3277258850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21411d414d646397e77fcea3c0600b1e746febaaa429c8cd9b048601496eefcc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/031438b48555417cb802db9c93502bae42689d2a494360bd15e1df3277258850"} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21411d414d646397e77fcea3c0600b1e746febaaa429c8cd9b048601496eefcc"} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e684a6707a4a72730691087959772d3a25187603a5a94fcf05139e69eecc55f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231"} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a9c0ea5c1e0a8b1052aab40cbf6d2296230e10b76de5de79187370ea6348861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e684a6707a4a72730691087959772d3a25187603a5a94fcf05139e69eecc55f1"} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6561ae2232d5ae9b6d64b10c52eb289e61c90f40a460f287419b0246d27d1cdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231"} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380c28ee897ca188ba254637bc51b266d5b6d72028e1ff2c5ee9053f74a04dc0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0550fe6dcb8bceb880e95b102502f4ef750ca8c64a6bfd9bdbb99c2325c99f6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ae95c5b21ba6d69b2bdbd9b11bdfda0d979e5e0005d1b97114247d9d5abcdc9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a9c0ea5c1e0a8b1052aab40cbf6d2296230e10b76de5de79187370ea6348861"} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6561ae2232d5ae9b6d64b10c52eb289e61c90f40a460f287419b0246d27d1cdd"} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231"} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380c28ee897ca188ba254637bc51b266d5b6d72028e1ff2c5ee9053f74a04dc0"} {"level":"debug","ts":"2026-07-07T00:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74bc932726e5fd128020d078160b33e81091f3aa8a9f7c2d5560cabb3fe25279","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75900b16015700e044df79e70049afb826c08e31dca9ca8ebeae98a9ebcbe31e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0550fe6dcb8bceb880e95b102502f4ef750ca8c64a6bfd9bdbb99c2325c99f6e"} {"level":"debug","ts":"2026-07-07T00:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a9071b7fb9d142ead444427a9997911045695eac290c9231ef5820b0344842e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ae95c5b21ba6d69b2bdbd9b11bdfda0d979e5e0005d1b97114247d9d5abcdc9"} {"level":"debug","ts":"2026-07-07T00:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14aedfa6d260504741740f61150e6b6ef6ed48fa5c50e3cd67939ec6900e48d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b"} {"level":"info","ts":"2026-07-07T00:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74bc932726e5fd128020d078160b33e81091f3aa8a9f7c2d5560cabb3fe25279"} {"level":"debug","ts":"2026-07-07T00:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4d9131a441045b35e4592dc529b826b75a05d2ff59da15338f928f9fa956569","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T00:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fb77517fee7d660fd923d72eec388ee1382231ece0d2436d06255e6a9f4e604","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75900b16015700e044df79e70049afb826c08e31dca9ca8ebeae98a9ebcbe31e"} {"level":"debug","ts":"2026-07-07T00:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"752bd30d8c49382a102973927937dae6f287af182dd290c6fe2128729b10358a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T00:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a9071b7fb9d142ead444427a9997911045695eac290c9231ef5820b0344842e"} {"level":"info","ts":"2026-07-07T00:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14aedfa6d260504741740f61150e6b6ef6ed48fa5c50e3cd67939ec6900e48d1"} {"level":"info","ts":"2026-07-07T00:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488"} {"level":"info","ts":"2026-07-07T00:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4d9131a441045b35e4592dc529b826b75a05d2ff59da15338f928f9fa956569"} {"level":"info","ts":"2026-07-07T00:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fb77517fee7d660fd923d72eec388ee1382231ece0d2436d06255e6a9f4e604"} {"level":"info","ts":"2026-07-07T00:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/752bd30d8c49382a102973927937dae6f287af182dd290c6fe2128729b10358a"} {"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ac665ed2-3540-912a-9084-f8627c595514","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45300","PortSpecifier":{"PortValue":45300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ac665ed2-3540-912a-9084-f8627c595514","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ac665ed2-3540-912a-9084-f8627c595514","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45300","PortSpecifier":{"PortValue":45300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384547,"nanos":479668687},"http":{"id":"ac665ed2-3540-912a-9084-f8627c595514","method":"POST","headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ac665ed2-3540-912a-9084-f8627c595514","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ac665ed2-3540-912a-9084-f8627c595514","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"]}} {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ac665ed2-3540-912a-9084-f8627c595514","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6561ae2232d5ae9b6d64b10c52eb289e61c90f40a460f287419b0246d27d1cdd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac665ed2-3540-912a-9084-f8627c595514","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac665ed2-3540-912a-9084-f8627c595514","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac665ed2-3540-912a-9084-f8627c595514","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ea3965/rate-test-model-ea3965\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ac665ed2-3540-912a-9084-f8627c595514","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac665ed2-3540-912a-9084-f8627c595514","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac665ed2-3540-912a-9084-f8627c595514","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac665ed2-3540-912a-9084-f8627c595514","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac665ed2-3540-912a-9084-f8627c595514","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca2e1bce-4907-4d96-87ea-35bccaa9922d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:40758","PortSpecifier":{"PortValue":40758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca2e1bce-4907-4d96-87ea-35bccaa9922d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca2e1bce-4907-4d96-87ea-35bccaa9922d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:40758","PortSpecifier":{"PortValue":40758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384547,"nanos":528526170},"http":{"id":"ca2e1bce-4907-4d96-87ea-35bccaa9922d","method":"POST","headers":{":authority":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ca2e1bce-4907-4d96-87ea-35bccaa9922d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca2e1bce-4907-4d96-87ea-35bccaa9922d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"]}} {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca2e1bce-4907-4d96-87ea-35bccaa9922d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21411d414d646397e77fcea3c0600b1e746febaaa429c8cd9b048601496eefcc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca2e1bce-4907-4d96-87ea-35bccaa9922d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca2e1bce-4907-4d96-87ea-35bccaa9922d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca2e1bce-4907-4d96-87ea-35bccaa9922d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e15ad3/rate-test-model-e15ad3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ca2e1bce-4907-4d96-87ea-35bccaa9922d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca2e1bce-4907-4d96-87ea-35bccaa9922d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca2e1bce-4907-4d96-87ea-35bccaa9922d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca2e1bce-4907-4d96-87ea-35bccaa9922d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca2e1bce-4907-4d96-87ea-35bccaa9922d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d42b8520-a125-48d2-a750-44a833bc5349","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45306","PortSpecifier":{"PortValue":45306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d42b8520-a125-48d2-a750-44a833bc5349","method":"POST","path":"/ai-tenant-e2e-shared-a-ea3965/rate-test-model-ea3965/v1/completions","host":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d42b8520-a125-48d2-a750-44a833bc5349","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45306","PortSpecifier":{"PortValue":45306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384547,"nanos":573483772},"http":{"id":"d42b8520-a125-48d2-a750-44a833bc5349","method":"POST","headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ea3965/rate-test-model-ea3965/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d42b8520-a125-48d2-a750-44a833bc5349","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QGjFZo1iJWDr5kvE_beJlCQHNCr4PG56DKT1DNVGgRuLhYfd3mNSEhl64AQf"} {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d42b8520-a125-48d2-a750-44a833bc5349","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ea3965.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QGjFZo1iJWDr5kvE_beJlCQHNCr4PG56DKT1DNVGgRuLhYfd3mNSEhl64AQf\"}"} {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d42b8520-a125-48d2-a750-44a833bc5349","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ea3965.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f3f65c80-c1d3-4504-aa56-43dde1d1f27c","keyName":"e2e-rate-a-ba6c50","subscription":"e2e-rate-iso-a-ba6c50","tenant":"e2e-shared-a-ea3965","userId":"f3f65c80-c1d3-4504-aa56-43dde1d1f27c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d42b8520-a125-48d2-a750-44a833bc5349","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ea3965.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ea3965/rate-test-model-ea3965\",\"requestedSubscription\":\"e2e-rate-iso-a-ba6c50\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d42b8520-a125-48d2-a750-44a833bc5349","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ea3965.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ea3965","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ba6c50","namespace":"ai-tenant-e2e-shared-a-ea3965","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d42b8520-a125-48d2-a750-44a833bc5349","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d42b8520-a125-48d2-a750-44a833bc5349","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d42b8520-a125-48d2-a750-44a833bc5349","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d42b8520-a125-48d2-a750-44a833bc5349","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d42b8520-a125-48d2-a750-44a833bc5349","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ea3965/rate-test-model-ea3965\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d42b8520-a125-48d2-a750-44a833bc5349","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d42b8520-a125-48d2-a750-44a833bc5349","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ba6c50"} {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d42b8520-a125-48d2-a750-44a833bc5349","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d42b8520-a125-48d2-a750-44a833bc5349","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f3f65c80-c1d3-4504-aa56-43dde1d1f27c","keyName":"e2e-rate-a-ba6c50","selected_subscription":"e2e-rate-iso-a-ba6c50","selected_subscription_key":"ai-tenant-e2e-shared-a-ea3965/e2e-rate-iso-a-ba6c50@ai-tenant-e2e-shared-a-ea3965/rate-test-model-ea3965","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ea3965","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ba6c50","namespace":"ai-tenant-e2e-shared-a-ea3965","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d42b8520-a125-48d2-a750-44a833bc5349","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d42b8520-a125-48d2-a750-44a833bc5349","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:35:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1060f667-4dc5-4e8c-9a6b-2b3e8d028322","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45322","PortSpecifier":{"PortValue":45322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1060f667-4dc5-4e8c-9a6b-2b3e8d028322","method":"POST","path":"/ai-tenant-e2e-shared-a-ea3965/rate-test-model-ea3965/v1/completions","host":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:35:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1060f667-4dc5-4e8c-9a6b-2b3e8d028322","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45322","PortSpecifier":{"PortValue":45322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384548,"nanos":623562984},"http":{"id":"1060f667-4dc5-4e8c-9a6b-2b3e8d028322","method":"POST","headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ea3965/rate-test-model-ea3965/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:35:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1060f667-4dc5-4e8c-9a6b-2b3e8d028322","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QGjFZo1iJWDr5kvE_beJlCQHNCr4PG56DKT1DNVGgRuLhYfd3mNSEhl64AQf"} {"level":"debug","ts":"2026-07-07T00:35:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1060f667-4dc5-4e8c-9a6b-2b3e8d028322","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ea3965.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QGjFZo1iJWDr5kvE_beJlCQHNCr4PG56DKT1DNVGgRuLhYfd3mNSEhl64AQf\"}"} {"level":"debug","ts":"2026-07-07T00:35:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1060f667-4dc5-4e8c-9a6b-2b3e8d028322","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ea3965.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f3f65c80-c1d3-4504-aa56-43dde1d1f27c","keyName":"e2e-rate-a-ba6c50","subscription":"e2e-rate-iso-a-ba6c50","tenant":"e2e-shared-a-ea3965","userId":"f3f65c80-c1d3-4504-aa56-43dde1d1f27c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T00:35:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1060f667-4dc5-4e8c-9a6b-2b3e8d028322","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ea3965.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ea3965/rate-test-model-ea3965\",\"requestedSubscription\":\"e2e-rate-iso-a-ba6c50\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T00:35:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1060f667-4dc5-4e8c-9a6b-2b3e8d028322","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ea3965.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ea3965","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ba6c50","namespace":"ai-tenant-e2e-shared-a-ea3965","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T00:35:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1060f667-4dc5-4e8c-9a6b-2b3e8d028322","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:35:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1060f667-4dc5-4e8c-9a6b-2b3e8d028322","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:35:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1060f667-4dc5-4e8c-9a6b-2b3e8d028322","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:35:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1060f667-4dc5-4e8c-9a6b-2b3e8d028322","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ea3965/rate-test-model-ea3965\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:35:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1060f667-4dc5-4e8c-9a6b-2b3e8d028322","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:35:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1060f667-4dc5-4e8c-9a6b-2b3e8d028322","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:35:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1060f667-4dc5-4e8c-9a6b-2b3e8d028322","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:35:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1060f667-4dc5-4e8c-9a6b-2b3e8d028322","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ba6c50"} {"level":"debug","ts":"2026-07-07T00:35:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1060f667-4dc5-4e8c-9a6b-2b3e8d028322","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f3f65c80-c1d3-4504-aa56-43dde1d1f27c","keyName":"e2e-rate-a-ba6c50","selected_subscription":"e2e-rate-iso-a-ba6c50","selected_subscription_key":"ai-tenant-e2e-shared-a-ea3965/e2e-rate-iso-a-ba6c50@ai-tenant-e2e-shared-a-ea3965/rate-test-model-ea3965","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ea3965","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ba6c50","namespace":"ai-tenant-e2e-shared-a-ea3965","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T00:35:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1060f667-4dc5-4e8c-9a6b-2b3e8d028322","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:35:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1060f667-4dc5-4e8c-9a6b-2b3e8d028322","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:35:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b4ad10a3-b05b-491e-90dd-dc3668dc6c5f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45336","PortSpecifier":{"PortValue":45336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b4ad10a3-b05b-491e-90dd-dc3668dc6c5f","method":"POST","path":"/ai-tenant-e2e-shared-a-ea3965/rate-test-model-ea3965/v1/completions","host":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:35:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b4ad10a3-b05b-491e-90dd-dc3668dc6c5f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45336","PortSpecifier":{"PortValue":45336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384549,"nanos":658410249},"http":{"id":"b4ad10a3-b05b-491e-90dd-dc3668dc6c5f","method":"POST","headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ea3965/rate-test-model-ea3965/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:35:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b4ad10a3-b05b-491e-90dd-dc3668dc6c5f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QGjFZo1iJWDr5kvE_beJlCQHNCr4PG56DKT1DNVGgRuLhYfd3mNSEhl64AQf"} {"level":"debug","ts":"2026-07-07T00:35:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b4ad10a3-b05b-491e-90dd-dc3668dc6c5f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ea3965.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QGjFZo1iJWDr5kvE_beJlCQHNCr4PG56DKT1DNVGgRuLhYfd3mNSEhl64AQf\"}"} {"level":"debug","ts":"2026-07-07T00:35:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b4ad10a3-b05b-491e-90dd-dc3668dc6c5f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ea3965.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f3f65c80-c1d3-4504-aa56-43dde1d1f27c","keyName":"e2e-rate-a-ba6c50","subscription":"e2e-rate-iso-a-ba6c50","tenant":"e2e-shared-a-ea3965","userId":"f3f65c80-c1d3-4504-aa56-43dde1d1f27c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T00:35:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b4ad10a3-b05b-491e-90dd-dc3668dc6c5f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ea3965.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ea3965/rate-test-model-ea3965\",\"requestedSubscription\":\"e2e-rate-iso-a-ba6c50\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T00:35:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b4ad10a3-b05b-491e-90dd-dc3668dc6c5f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ea3965.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ea3965","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ba6c50","namespace":"ai-tenant-e2e-shared-a-ea3965","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T00:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b4ad10a3-b05b-491e-90dd-dc3668dc6c5f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4ad10a3-b05b-491e-90dd-dc3668dc6c5f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4ad10a3-b05b-491e-90dd-dc3668dc6c5f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4ad10a3-b05b-491e-90dd-dc3668dc6c5f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4ad10a3-b05b-491e-90dd-dc3668dc6c5f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ea3965/rate-test-model-ea3965\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:35:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4ad10a3-b05b-491e-90dd-dc3668dc6c5f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:35:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4ad10a3-b05b-491e-90dd-dc3668dc6c5f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ba6c50"} {"level":"debug","ts":"2026-07-07T00:35:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4ad10a3-b05b-491e-90dd-dc3668dc6c5f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:35:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4ad10a3-b05b-491e-90dd-dc3668dc6c5f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f3f65c80-c1d3-4504-aa56-43dde1d1f27c","keyName":"e2e-rate-a-ba6c50","selected_subscription":"e2e-rate-iso-a-ba6c50","selected_subscription_key":"ai-tenant-e2e-shared-a-ea3965/e2e-rate-iso-a-ba6c50@ai-tenant-e2e-shared-a-ea3965/rate-test-model-ea3965","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ea3965","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ba6c50","namespace":"ai-tenant-e2e-shared-a-ea3965","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T00:35:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b4ad10a3-b05b-491e-90dd-dc3668dc6c5f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:35:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b4ad10a3-b05b-491e-90dd-dc3668dc6c5f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2185d58f-c0a8-40fd-8b9d-cd1eea717d70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53536","PortSpecifier":{"PortValue":53536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2185d58f-c0a8-40fd-8b9d-cd1eea717d70","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2185d58f-c0a8-40fd-8b9d-cd1eea717d70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53536","PortSpecifier":{"PortValue":53536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384562,"nanos":609690863},"http":{"id":"2185d58f-c0a8-40fd-8b9d-cd1eea717d70","method":"POST","headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2185d58f-c0a8-40fd-8b9d-cd1eea717d70","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2185d58f-c0a8-40fd-8b9d-cd1eea717d70","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"]}} {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2185d58f-c0a8-40fd-8b9d-cd1eea717d70","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6561ae2232d5ae9b6d64b10c52eb289e61c90f40a460f287419b0246d27d1cdd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2185d58f-c0a8-40fd-8b9d-cd1eea717d70","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2185d58f-c0a8-40fd-8b9d-cd1eea717d70","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2185d58f-c0a8-40fd-8b9d-cd1eea717d70","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ea3965/rate-test-model-ea3965\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2185d58f-c0a8-40fd-8b9d-cd1eea717d70","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2185d58f-c0a8-40fd-8b9d-cd1eea717d70","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2185d58f-c0a8-40fd-8b9d-cd1eea717d70","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2185d58f-c0a8-40fd-8b9d-cd1eea717d70","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2185d58f-c0a8-40fd-8b9d-cd1eea717d70","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ece29ecf-d854-410e-93da-3f200cdf6f85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39334","PortSpecifier":{"PortValue":39334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ece29ecf-d854-410e-93da-3f200cdf6f85","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ece29ecf-d854-410e-93da-3f200cdf6f85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39334","PortSpecifier":{"PortValue":39334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384562,"nanos":649270875},"http":{"id":"ece29ecf-d854-410e-93da-3f200cdf6f85","method":"POST","headers":{":authority":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ece29ecf-d854-410e-93da-3f200cdf6f85","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ece29ecf-d854-410e-93da-3f200cdf6f85","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"]}} {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ece29ecf-d854-410e-93da-3f200cdf6f85","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d5d6fb3702af"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=39ff853f-6f42-43b8-901e-fd4c5420cc37"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38b0f072-9c33-45f5-9cf1-65e2376cec36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21411d414d646397e77fcea3c0600b1e746febaaa429c8cd9b048601496eefcc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ece29ecf-d854-410e-93da-3f200cdf6f85","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ece29ecf-d854-410e-93da-3f200cdf6f85","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ece29ecf-d854-410e-93da-3f200cdf6f85","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e15ad3/rate-test-model-e15ad3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ece29ecf-d854-410e-93da-3f200cdf6f85","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ece29ecf-d854-410e-93da-3f200cdf6f85","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ece29ecf-d854-410e-93da-3f200cdf6f85","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ece29ecf-d854-410e-93da-3f200cdf6f85","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ece29ecf-d854-410e-93da-3f200cdf6f85","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9de171b-908e-43ce-9821-b8d3a91ea79f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53548","PortSpecifier":{"PortValue":53548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b9de171b-908e-43ce-9821-b8d3a91ea79f","method":"POST","path":"/ai-tenant-e2e-shared-a-ea3965/rate-test-model-ea3965/v1/completions","host":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9de171b-908e-43ce-9821-b8d3a91ea79f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53548","PortSpecifier":{"PortValue":53548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384562,"nanos":699188713},"http":{"id":"b9de171b-908e-43ce-9821-b8d3a91ea79f","method":"POST","headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ea3965/rate-test-model-ea3965/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b9de171b-908e-43ce-9821-b8d3a91ea79f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3MwsCoEQ9oh4xXqb_nSIH2iJntlwJXIeQdmFC0KBr4OWjTNxqkMkCvjKNhpF"} {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b9de171b-908e-43ce-9821-b8d3a91ea79f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ea3965.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3MwsCoEQ9oh4xXqb_nSIH2iJntlwJXIeQdmFC0KBr4OWjTNxqkMkCvjKNhpF\"}"} {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b9de171b-908e-43ce-9821-b8d3a91ea79f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ea3965.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d6150935-bdb4-4371-a50b-23a4424c498b","keyName":"e2e-rate-a-126f0e","subscription":"e2e-rate-iso-a-126f0e","tenant":"e2e-shared-a-ea3965","userId":"d6150935-bdb4-4371-a50b-23a4424c498b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b9de171b-908e-43ce-9821-b8d3a91ea79f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ea3965.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ea3965/rate-test-model-ea3965\",\"requestedSubscription\":\"e2e-rate-iso-a-126f0e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b9de171b-908e-43ce-9821-b8d3a91ea79f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ea3965.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ea3965","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-126f0e","namespace":"ai-tenant-e2e-shared-a-ea3965","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b9de171b-908e-43ce-9821-b8d3a91ea79f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9de171b-908e-43ce-9821-b8d3a91ea79f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9de171b-908e-43ce-9821-b8d3a91ea79f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9de171b-908e-43ce-9821-b8d3a91ea79f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9de171b-908e-43ce-9821-b8d3a91ea79f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ea3965/rate-test-model-ea3965\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9de171b-908e-43ce-9821-b8d3a91ea79f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9de171b-908e-43ce-9821-b8d3a91ea79f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-126f0e"} {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9de171b-908e-43ce-9821-b8d3a91ea79f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9de171b-908e-43ce-9821-b8d3a91ea79f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d6150935-bdb4-4371-a50b-23a4424c498b","keyName":"e2e-rate-a-126f0e","selected_subscription":"e2e-rate-iso-a-126f0e","selected_subscription_key":"ai-tenant-e2e-shared-a-ea3965/e2e-rate-iso-a-126f0e@ai-tenant-e2e-shared-a-ea3965/rate-test-model-ea3965","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ea3965","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-126f0e","namespace":"ai-tenant-e2e-shared-a-ea3965","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9de171b-908e-43ce-9821-b8d3a91ea79f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:36:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9de171b-908e-43ce-9821-b8d3a91ea79f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:36:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f41f745-538f-495e-970f-0bb1b66b488a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53562","PortSpecifier":{"PortValue":53562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f41f745-538f-495e-970f-0bb1b66b488a","method":"POST","path":"/ai-tenant-e2e-shared-a-ea3965/rate-test-model-ea3965/v1/completions","host":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:36:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f41f745-538f-495e-970f-0bb1b66b488a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53562","PortSpecifier":{"PortValue":53562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384563,"nanos":740629239},"http":{"id":"5f41f745-538f-495e-970f-0bb1b66b488a","method":"POST","headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ea3965/rate-test-model-ea3965/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:36:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f41f745-538f-495e-970f-0bb1b66b488a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3MwsCoEQ9oh4xXqb_nSIH2iJntlwJXIeQdmFC0KBr4OWjTNxqkMkCvjKNhpF"} {"level":"debug","ts":"2026-07-07T00:36:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5f41f745-538f-495e-970f-0bb1b66b488a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ea3965.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3MwsCoEQ9oh4xXqb_nSIH2iJntlwJXIeQdmFC0KBr4OWjTNxqkMkCvjKNhpF\"}"} {"level":"debug","ts":"2026-07-07T00:36:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5f41f745-538f-495e-970f-0bb1b66b488a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ea3965.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d6150935-bdb4-4371-a50b-23a4424c498b","keyName":"e2e-rate-a-126f0e","subscription":"e2e-rate-iso-a-126f0e","tenant":"e2e-shared-a-ea3965","userId":"d6150935-bdb4-4371-a50b-23a4424c498b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T00:36:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5f41f745-538f-495e-970f-0bb1b66b488a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ea3965.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ea3965/rate-test-model-ea3965\",\"requestedSubscription\":\"e2e-rate-iso-a-126f0e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T00:36:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5f41f745-538f-495e-970f-0bb1b66b488a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ea3965.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ea3965","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-126f0e","namespace":"ai-tenant-e2e-shared-a-ea3965","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T00:36:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f41f745-538f-495e-970f-0bb1b66b488a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:36:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f41f745-538f-495e-970f-0bb1b66b488a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:36:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f41f745-538f-495e-970f-0bb1b66b488a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:36:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f41f745-538f-495e-970f-0bb1b66b488a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:36:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f41f745-538f-495e-970f-0bb1b66b488a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ea3965/rate-test-model-ea3965\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:36:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f41f745-538f-495e-970f-0bb1b66b488a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:36:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f41f745-538f-495e-970f-0bb1b66b488a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:36:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f41f745-538f-495e-970f-0bb1b66b488a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-126f0e"} {"level":"debug","ts":"2026-07-07T00:36:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f41f745-538f-495e-970f-0bb1b66b488a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d6150935-bdb4-4371-a50b-23a4424c498b","keyName":"e2e-rate-a-126f0e","selected_subscription":"e2e-rate-iso-a-126f0e","selected_subscription_key":"ai-tenant-e2e-shared-a-ea3965/e2e-rate-iso-a-126f0e@ai-tenant-e2e-shared-a-ea3965/rate-test-model-ea3965","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ea3965","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-126f0e","namespace":"ai-tenant-e2e-shared-a-ea3965","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T00:36:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f41f745-538f-495e-970f-0bb1b66b488a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:36:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f41f745-538f-495e-970f-0bb1b66b488a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e527bd7-56dd-427b-a456-760c74db1880","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53566","PortSpecifier":{"PortValue":53566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e527bd7-56dd-427b-a456-760c74db1880","method":"POST","path":"/ai-tenant-e2e-shared-a-ea3965/rate-test-model-ea3965/v1/completions","host":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e527bd7-56dd-427b-a456-760c74db1880","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53566","PortSpecifier":{"PortValue":53566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384564,"nanos":775470910},"http":{"id":"9e527bd7-56dd-427b-a456-760c74db1880","method":"POST","headers":{":authority":"e2e-shared-a-ea3965.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ea3965/rate-test-model-ea3965/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e527bd7-56dd-427b-a456-760c74db1880","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3MwsCoEQ9oh4xXqb_nSIH2iJntlwJXIeQdmFC0KBr4OWjTNxqkMkCvjKNhpF"} {"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9e527bd7-56dd-427b-a456-760c74db1880","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ea3965.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3MwsCoEQ9oh4xXqb_nSIH2iJntlwJXIeQdmFC0KBr4OWjTNxqkMkCvjKNhpF\"}"} {"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9e527bd7-56dd-427b-a456-760c74db1880","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ea3965.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d6150935-bdb4-4371-a50b-23a4424c498b","keyName":"e2e-rate-a-126f0e","subscription":"e2e-rate-iso-a-126f0e","tenant":"e2e-shared-a-ea3965","userId":"d6150935-bdb4-4371-a50b-23a4424c498b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9e527bd7-56dd-427b-a456-760c74db1880","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ea3965.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ea3965/rate-test-model-ea3965\",\"requestedSubscription\":\"e2e-rate-iso-a-126f0e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9e527bd7-56dd-427b-a456-760c74db1880","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ea3965.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ea3965","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-126f0e","namespace":"ai-tenant-e2e-shared-a-ea3965","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e527bd7-56dd-427b-a456-760c74db1880","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e527bd7-56dd-427b-a456-760c74db1880","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e527bd7-56dd-427b-a456-760c74db1880","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e527bd7-56dd-427b-a456-760c74db1880","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ea3965/rate-test-model-ea3965\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e527bd7-56dd-427b-a456-760c74db1880","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e527bd7-56dd-427b-a456-760c74db1880","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e527bd7-56dd-427b-a456-760c74db1880","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-126f0e"} {"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e527bd7-56dd-427b-a456-760c74db1880","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e527bd7-56dd-427b-a456-760c74db1880","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d6150935-bdb4-4371-a50b-23a4424c498b","keyName":"e2e-rate-a-126f0e","selected_subscription":"e2e-rate-iso-a-126f0e","selected_subscription_key":"ai-tenant-e2e-shared-a-ea3965/e2e-rate-iso-a-126f0e@ai-tenant-e2e-shared-a-ea3965/rate-test-model-ea3965","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ea3965","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-126f0e","namespace":"ai-tenant-e2e-shared-a-ea3965","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e527bd7-56dd-427b-a456-760c74db1880","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e527bd7-56dd-427b-a456-760c74db1880","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bd9ed40-a588-4962-8645-3d566197a8c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39336","PortSpecifier":{"PortValue":39336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0bd9ed40-a588-4962-8645-3d566197a8c2","method":"POST","path":"/ai-tenant-e2e-shared-b-e15ad3/rate-test-model-e15ad3/v1/completions","host":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bd9ed40-a588-4962-8645-3d566197a8c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39336","PortSpecifier":{"PortValue":39336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384564,"nanos":812055438},"http":{"id":"0bd9ed40-a588-4962-8645-3d566197a8c2","method":"POST","headers":{":authority":"e2e-shared-b-e15ad3.apps.b2ed471f-957a-437f-ab44-d5d6fb3702af.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-e15ad3/rate-test-model-e15ad3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0bd9ed40-a588-4962-8645-3d566197a8c2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-10xMI6jHeeq5igHgq_YPFhOblWHU5i4Ce4uH5gehExf1QSEV1H7DzXeqAEHaI"} {"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0bd9ed40-a588-4962-8645-3d566197a8c2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e15ad3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-10xMI6jHeeq5igHgq_YPFhOblWHU5i4Ce4uH5gehExf1QSEV1H7DzXeqAEHaI\"}"} {"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0bd9ed40-a588-4962-8645-3d566197a8c2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e15ad3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"54d707f7-1f1f-43c2-a3f4-5d2abb642a5b","keyName":"e2e-rate-b-126f0e","subscription":"e2e-rate-iso-b-126f0e","tenant":"e2e-shared-b-e15ad3","userId":"54d707f7-1f1f-43c2-a3f4-5d2abb642a5b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0bd9ed40-a588-4962-8645-3d566197a8c2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-e15ad3.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-e15ad3/rate-test-model-e15ad3\",\"requestedSubscription\":\"e2e-rate-iso-b-126f0e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0bd9ed40-a588-4962-8645-3d566197a8c2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e15ad3.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e15ad3","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-126f0e","namespace":"ai-tenant-e2e-shared-b-e15ad3","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0bd9ed40-a588-4962-8645-3d566197a8c2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bd9ed40-a588-4962-8645-3d566197a8c2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bd9ed40-a588-4962-8645-3d566197a8c2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bd9ed40-a588-4962-8645-3d566197a8c2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e15ad3/rate-test-model-e15ad3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bd9ed40-a588-4962-8645-3d566197a8c2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bd9ed40-a588-4962-8645-3d566197a8c2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bd9ed40-a588-4962-8645-3d566197a8c2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-126f0e"} {"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bd9ed40-a588-4962-8645-3d566197a8c2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bd9ed40-a588-4962-8645-3d566197a8c2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"54d707f7-1f1f-43c2-a3f4-5d2abb642a5b","keyName":"e2e-rate-b-126f0e","selected_subscription":"e2e-rate-iso-b-126f0e","selected_subscription_key":"ai-tenant-e2e-shared-b-e15ad3/e2e-rate-iso-b-126f0e@ai-tenant-e2e-shared-b-e15ad3/rate-test-model-e15ad3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e15ad3","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-126f0e","namespace":"ai-tenant-e2e-shared-b-e15ad3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bd9ed40-a588-4962-8645-3d566197a8c2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bd9ed40-a588-4962-8645-3d566197a8c2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T00:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/380c28ee897ca188ba254637bc51b266d5b6d72028e1ff2c5ee9053f74a04dc0"} {"level":"info","ts":"2026-07-07T00:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ae95c5b21ba6d69b2bdbd9b11bdfda0d979e5e0005d1b97114247d9d5abcdc9"} {"level":"info","ts":"2026-07-07T00:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d1489945cffda33c1b7557af0e0eeb524044cddca8c679b2136c23b91d2ed6e"} {"level":"info","ts":"2026-07-07T00:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f68a26496d3ef62be2ef31751498e8d30c3cce1a674fd84fa6b851cd06e8a63b"} {"level":"info","ts":"2026-07-07T00:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a9071b7fb9d142ead444427a9997911045695eac290c9231ef5820b0344842e"} {"level":"info","ts":"2026-07-07T00:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4d9131a441045b35e4592dc529b826b75a05d2ff59da15338f928f9fa956569"} {"level":"info","ts":"2026-07-07T00:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6af40cd7c0eddafbc3ffc3227f824967355ffc6849a029fd96ef055273d5f6df"} {"level":"info","ts":"2026-07-07T00:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a9c0ea5c1e0a8b1052aab40cbf6d2296230e10b76de5de79187370ea6348861"} {"level":"info","ts":"2026-07-07T00:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0550fe6dcb8bceb880e95b102502f4ef750ca8c64a6bfd9bdbb99c2325c99f6e"} {"level":"info","ts":"2026-07-07T00:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8e11af63d6bc4243240cf5758e6baa24b09bf0fabf0d8de51fa164cf89386fa"} {"level":"info","ts":"2026-07-07T00:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e684a6707a4a72730691087959772d3a25187603a5a94fcf05139e69eecc55f1"} {"level":"info","ts":"2026-07-07T00:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f6dc20b5c76349d383ea94a5ad87a66dec1f5c8353d96207951312996575826"} {"level":"info","ts":"2026-07-07T00:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5e16cf3e97f20f7e43e2911433fde58299bbe94741e07521fca4fb992edb231"} {"level":"info","ts":"2026-07-07T00:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/94f70bf65487d44efbe9a1ca613ae4846650271587e797d8e0fb01804905ab3b"} {"level":"info","ts":"2026-07-07T00:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/752bd30d8c49382a102973927937dae6f287af182dd290c6fe2128729b10358a"} {"level":"info","ts":"2026-07-07T00:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b63db41f040a33513d97a80211e3b292fd397fb464b0e4863d1eb621d9de0488"} {"level":"info","ts":"2026-07-07T00:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6561ae2232d5ae9b6d64b10c52eb289e61c90f40a460f287419b0246d27d1cdd"} {"level":"info","ts":"2026-07-07T00:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75900b16015700e044df79e70049afb826c08e31dca9ca8ebeae98a9ebcbe31e"} {"level":"info","ts":"2026-07-07T00:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14aedfa6d260504741740f61150e6b6ef6ed48fa5c50e3cd67939ec6900e48d1"} {"level":"info","ts":"2026-07-07T00:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fb77517fee7d660fd923d72eec388ee1382231ece0d2436d06255e6a9f4e604"} {"level":"info","ts":"2026-07-07T00:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1161527a9036b7475c2237a0075558ee5de6c1c78ecb8a92fa8320dbd74d4ed"} {"level":"info","ts":"2026-07-07T00:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74bc932726e5fd128020d078160b33e81091f3aa8a9f7c2d5560cabb3fe25279"} {"level":"info","ts":"2026-07-07T00:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/031438b48555417cb802db9c93502bae42689d2a494360bd15e1df3277258850"} {"level":"info","ts":"2026-07-07T00:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21411d414d646397e77fcea3c0600b1e746febaaa429c8cd9b048601496eefcc"}