--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"} {"level":"info","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:44:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:44:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f"} {"level":"info","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:44:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:44:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"} {"level":"info","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f"} {"level":"info","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"} {"level":"info","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f"} {"level":"info","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"} {"level":"debug","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:44:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:44:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"} {"level":"info","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"} {"level":"debug","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:44:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:44:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"} {"level":"info","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"} {"level":"debug","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:44:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:44:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"} {"level":"info","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"} {"level":"debug","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:44:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:44:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"} {"level":"debug","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"} {"level":"debug","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:44:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:44:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"} {"level":"debug","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"} {"level":"debug","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:44:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:44:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"} {"level":"debug","ts":"2026-07-06T22:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"} {"level":"debug","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"} {"level":"debug","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"} {"level":"debug","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"} {"level":"debug","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"} {"level":"debug","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"} {"level":"debug","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"} {"level":"debug","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"} {"level":"debug","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"} {"level":"debug","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"} {"level":"debug","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"} {"level":"debug","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"} {"level":"debug","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"} {"level":"debug","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"} {"level":"debug","ts":"2026-07-06T22:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68dbd6b1b04ff73d1f2764bac5f08357901e2f0fe519623bc93084594b4e063c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68dbd6b1b04ff73d1f2764bac5f08357901e2f0fe519623bc93084594b4e063c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68dbd6b1b04ff73d1f2764bac5f08357901e2f0fe519623bc93084594b4e063c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68dbd6b1b04ff73d1f2764bac5f08357901e2f0fe519623bc93084594b4e063c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68dbd6b1b04ff73d1f2764bac5f08357901e2f0fe519623bc93084594b4e063c"} {"level":"debug","ts":"2026-07-06T22:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68dbd6b1b04ff73d1f2764bac5f08357901e2f0fe519623bc93084594b4e063c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68dbd6b1b04ff73d1f2764bac5f08357901e2f0fe519623bc93084594b4e063c"} {"level":"debug","ts":"2026-07-06T22:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68dbd6b1b04ff73d1f2764bac5f08357901e2f0fe519623bc93084594b4e063c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:44:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:44:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68dbd6b1b04ff73d1f2764bac5f08357901e2f0fe519623bc93084594b4e063c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68dbd6b1b04ff73d1f2764bac5f08357901e2f0fe519623bc93084594b4e063c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68dbd6b1b04ff73d1f2764bac5f08357901e2f0fe519623bc93084594b4e063c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68dbd6b1b04ff73d1f2764bac5f08357901e2f0fe519623bc93084594b4e063c"} {"level":"debug","ts":"2026-07-06T22:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754"} {"level":"debug","ts":"2026-07-06T22:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754"} {"level":"debug","ts":"2026-07-06T22:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:44:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:44:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754"} {"level":"debug","ts":"2026-07-06T22:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754"} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754"} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754"} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754"} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754"} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754"} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cb15c0b24cd72f45f0e07e075213930e0bf9394a814c73e213dc060a13d463d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cb15c0b24cd72f45f0e07e075213930e0bf9394a814c73e213dc060a13d463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7cb15c0b24cd72f45f0e07e075213930e0bf9394a814c73e213dc060a13d463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7cb15c0b24cd72f45f0e07e075213930e0bf9394a814c73e213dc060a13d463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754"} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cb15c0b24cd72f45f0e07e075213930e0bf9394a814c73e213dc060a13d463d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cb15c0b24cd72f45f0e07e075213930e0bf9394a814c73e213dc060a13d463d"} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cb15c0b24cd72f45f0e07e075213930e0bf9394a814c73e213dc060a13d463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cb15c0b24cd72f45f0e07e075213930e0bf9394a814c73e213dc060a13d463d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7cb15c0b24cd72f45f0e07e075213930e0bf9394a814c73e213dc060a13d463d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cb15c0b24cd72f45f0e07e075213930e0bf9394a814c73e213dc060a13d463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cb15c0b24cd72f45f0e07e075213930e0bf9394a814c73e213dc060a13d463d"} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cb15c0b24cd72f45f0e07e075213930e0bf9394a814c73e213dc060a13d463d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cb15c0b24cd72f45f0e07e075213930e0bf9394a814c73e213dc060a13d463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cb15c0b24cd72f45f0e07e075213930e0bf9394a814c73e213dc060a13d463d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7cb15c0b24cd72f45f0e07e075213930e0bf9394a814c73e213dc060a13d463d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7cb15c0b24cd72f45f0e07e075213930e0bf9394a814c73e213dc060a13d463d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0509500cb92cb23d8666daa676789f2d21e3940ef6ece1b6485ee80c0429d181","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cb15c0b24cd72f45f0e07e075213930e0bf9394a814c73e213dc060a13d463d"} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0509500cb92cb23d8666daa676789f2d21e3940ef6ece1b6485ee80c0429d181","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cb15c0b24cd72f45f0e07e075213930e0bf9394a814c73e213dc060a13d463d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7cb15c0b24cd72f45f0e07e075213930e0bf9394a814c73e213dc060a13d463d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cb15c0b24cd72f45f0e07e075213930e0bf9394a814c73e213dc060a13d463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0509500cb92cb23d8666daa676789f2d21e3940ef6ece1b6485ee80c0429d181","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7cb15c0b24cd72f45f0e07e075213930e0bf9394a814c73e213dc060a13d463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0509500cb92cb23d8666daa676789f2d21e3940ef6ece1b6485ee80c0429d181","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754"} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0509500cb92cb23d8666daa676789f2d21e3940ef6ece1b6485ee80c0429d181","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0509500cb92cb23d8666daa676789f2d21e3940ef6ece1b6485ee80c0429d181","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0509500cb92cb23d8666daa676789f2d21e3940ef6ece1b6485ee80c0429d181","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0509500cb92cb23d8666daa676789f2d21e3940ef6ece1b6485ee80c0429d181"} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf3c72f1c35c4d98c607d3c6f9ff59d11f445bb5fce4928fd801e80f45b866ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf3c72f1c35c4d98c607d3c6f9ff59d11f445bb5fce4928fd801e80f45b866ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf3c72f1c35c4d98c607d3c6f9ff59d11f445bb5fce4928fd801e80f45b866ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf3c72f1c35c4d98c607d3c6f9ff59d11f445bb5fce4928fd801e80f45b866ec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cb15c0b24cd72f45f0e07e075213930e0bf9394a814c73e213dc060a13d463d"} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0509500cb92cb23d8666daa676789f2d21e3940ef6ece1b6485ee80c0429d181","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf3c72f1c35c4d98c607d3c6f9ff59d11f445bb5fce4928fd801e80f45b866ec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0509500cb92cb23d8666daa676789f2d21e3940ef6ece1b6485ee80c0429d181"} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf3c72f1c35c4d98c607d3c6f9ff59d11f445bb5fce4928fd801e80f45b866ec"} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf3c72f1c35c4d98c607d3c6f9ff59d11f445bb5fce4928fd801e80f45b866ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf3c72f1c35c4d98c607d3c6f9ff59d11f445bb5fce4928fd801e80f45b866ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf3c72f1c35c4d98c607d3c6f9ff59d11f445bb5fce4928fd801e80f45b866ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf3c72f1c35c4d98c607d3c6f9ff59d11f445bb5fce4928fd801e80f45b866ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf3c72f1c35c4d98c607d3c6f9ff59d11f445bb5fce4928fd801e80f45b866ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf3c72f1c35c4d98c607d3c6f9ff59d11f445bb5fce4928fd801e80f45b866ec"} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf3c72f1c35c4d98c607d3c6f9ff59d11f445bb5fce4928fd801e80f45b866ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf3c72f1c35c4d98c607d3c6f9ff59d11f445bb5fce4928fd801e80f45b866ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf3c72f1c35c4d98c607d3c6f9ff59d11f445bb5fce4928fd801e80f45b866ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24"} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf3c72f1c35c4d98c607d3c6f9ff59d11f445bb5fce4928fd801e80f45b866ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf3c72f1c35c4d98c607d3c6f9ff59d11f445bb5fce4928fd801e80f45b866ec"} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf3c72f1c35c4d98c607d3c6f9ff59d11f445bb5fce4928fd801e80f45b866ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf3c72f1c35c4d98c607d3c6f9ff59d11f445bb5fce4928fd801e80f45b866ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf3c72f1c35c4d98c607d3c6f9ff59d11f445bb5fce4928fd801e80f45b866ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf3c72f1c35c4d98c607d3c6f9ff59d11f445bb5fce4928fd801e80f45b866ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf3c72f1c35c4d98c607d3c6f9ff59d11f445bb5fce4928fd801e80f45b866ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf3c72f1c35c4d98c607d3c6f9ff59d11f445bb5fce4928fd801e80f45b866ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24"} {"level":"error","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bf3c72f1c35c4d98c607d3c6f9ff59d11f445bb5fce4928fd801e80f45b866ec","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bf3c72f1c35c4d98c607d3c6f9ff59d11f445bb5fce4928fd801e80f45b866ec\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf3c72f1c35c4d98c607d3c6f9ff59d11f445bb5fce4928fd801e80f45b866ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf3c72f1c35c4d98c607d3c6f9ff59d11f445bb5fce4928fd801e80f45b866ec"} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf3c72f1c35c4d98c607d3c6f9ff59d11f445bb5fce4928fd801e80f45b866ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0509500cb92cb23d8666daa676789f2d21e3940ef6ece1b6485ee80c0429d181","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0509500cb92cb23d8666daa676789f2d21e3940ef6ece1b6485ee80c0429d181"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24"} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0509500cb92cb23d8666daa676789f2d21e3940ef6ece1b6485ee80c0429d181","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf3c72f1c35c4d98c607d3c6f9ff59d11f445bb5fce4928fd801e80f45b866ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf3c72f1c35c4d98c607d3c6f9ff59d11f445bb5fce4928fd801e80f45b866ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a"} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf3c72f1c35c4d98c607d3c6f9ff59d11f445bb5fce4928fd801e80f45b866ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83b114d7d6f909e8d64cd7e74f221a5eccc9987240157a5f96a7a4bb94c7f604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf3c72f1c35c4d98c607d3c6f9ff59d11f445bb5fce4928fd801e80f45b866ec"} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83b114d7d6f909e8d64cd7e74f221a5eccc9987240157a5f96a7a4bb94c7f604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0509500cb92cb23d8666daa676789f2d21e3940ef6ece1b6485ee80c0429d181","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf3c72f1c35c4d98c607d3c6f9ff59d11f445bb5fce4928fd801e80f45b866ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83b114d7d6f909e8d64cd7e74f221a5eccc9987240157a5f96a7a4bb94c7f604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83b114d7d6f909e8d64cd7e74f221a5eccc9987240157a5f96a7a4bb94c7f604"} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83b114d7d6f909e8d64cd7e74f221a5eccc9987240157a5f96a7a4bb94c7f604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b8a7803ffbb7b4dc94a3ce9af2b8b91047d8d5fd54a5d227b59a3ad296cdb83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b8a7803ffbb7b4dc94a3ce9af2b8b91047d8d5fd54a5d227b59a3ad296cdb83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83b114d7d6f909e8d64cd7e74f221a5eccc9987240157a5f96a7a4bb94c7f604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83b114d7d6f909e8d64cd7e74f221a5eccc9987240157a5f96a7a4bb94c7f604"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0509500cb92cb23d8666daa676789f2d21e3940ef6ece1b6485ee80c0429d181"} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83b114d7d6f909e8d64cd7e74f221a5eccc9987240157a5f96a7a4bb94c7f604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"154ff04b14a5fbbf08c48c23583930797974b0cb1eaaf0709b5c185a40a04f6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a"} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"154ff04b14a5fbbf08c48c23583930797974b0cb1eaaf0709b5c185a40a04f6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b8a7803ffbb7b4dc94a3ce9af2b8b91047d8d5fd54a5d227b59a3ad296cdb83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83b114d7d6f909e8d64cd7e74f221a5eccc9987240157a5f96a7a4bb94c7f604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"154ff04b14a5fbbf08c48c23583930797974b0cb1eaaf0709b5c185a40a04f6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"154ff04b14a5fbbf08c48c23583930797974b0cb1eaaf0709b5c185a40a04f6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b8a7803ffbb7b4dc94a3ce9af2b8b91047d8d5fd54a5d227b59a3ad296cdb83","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf3c72f1c35c4d98c607d3c6f9ff59d11f445bb5fce4928fd801e80f45b866ec"} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"154ff04b14a5fbbf08c48c23583930797974b0cb1eaaf0709b5c185a40a04f6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b8a7803ffbb7b4dc94a3ce9af2b8b91047d8d5fd54a5d227b59a3ad296cdb83","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83b114d7d6f909e8d64cd7e74f221a5eccc9987240157a5f96a7a4bb94c7f604"} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b8a7803ffbb7b4dc94a3ce9af2b8b91047d8d5fd54a5d227b59a3ad296cdb83"} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"154ff04b14a5fbbf08c48c23583930797974b0cb1eaaf0709b5c185a40a04f6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"154ff04b14a5fbbf08c48c23583930797974b0cb1eaaf0709b5c185a40a04f6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b8a7803ffbb7b4dc94a3ce9af2b8b91047d8d5fd54a5d227b59a3ad296cdb83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b8a7803ffbb7b4dc94a3ce9af2b8b91047d8d5fd54a5d227b59a3ad296cdb83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/154ff04b14a5fbbf08c48c23583930797974b0cb1eaaf0709b5c185a40a04f6b"} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b8a7803ffbb7b4dc94a3ce9af2b8b91047d8d5fd54a5d227b59a3ad296cdb83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"154ff04b14a5fbbf08c48c23583930797974b0cb1eaaf0709b5c185a40a04f6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b8a7803ffbb7b4dc94a3ce9af2b8b91047d8d5fd54a5d227b59a3ad296cdb83","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/154ff04b14a5fbbf08c48c23583930797974b0cb1eaaf0709b5c185a40a04f6b"} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b8a7803ffbb7b4dc94a3ce9af2b8b91047d8d5fd54a5d227b59a3ad296cdb83"} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"154ff04b14a5fbbf08c48c23583930797974b0cb1eaaf0709b5c185a40a04f6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:44:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["154ff04b14a5fbbf08c48c23583930797974b0cb1eaaf0709b5c185a40a04f6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"154ff04b14a5fbbf08c48c23583930797974b0cb1eaaf0709b5c185a40a04f6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"154ff04b14a5fbbf08c48c23583930797974b0cb1eaaf0709b5c185a40a04f6b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/154ff04b14a5fbbf08c48c23583930797974b0cb1eaaf0709b5c185a40a04f6b"} {"level":"info","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05de8285-fb9a-45e6-ba43-e4d6d7663b2a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47264","PortSpecifier":{"PortValue":47264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"05de8285-fb9a-45e6-ba43-e4d6d7663b2a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05de8285-fb9a-45e6-ba43-e4d6d7663b2a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47264","PortSpecifier":{"PortValue":47264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783377866,"nanos":124381493},"http":{"id":"05de8285-fb9a-45e6-ba43-e4d6d7663b2a","method":"POST","headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"05de8285-fb9a-45e6-ba43-e4d6d7663b2a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"05de8285-fb9a-45e6-ba43-e4d6d7663b2a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"011dc850-13ad-4879-b525-4b025a565c36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"]}} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"05de8285-fb9a-45e6-ba43-e4d6d7663b2a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"011dc850-13ad-4879-b525-4b025a565c36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d154abbb9a8b96bb5c6e5e7241cade7cef39b6a6c696bf3e34e3dbb5833fa8f4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05de8285-fb9a-45e6-ba43-e4d6d7663b2a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05de8285-fb9a-45e6-ba43-e4d6d7663b2a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05de8285-fb9a-45e6-ba43-e4d6d7663b2a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-65387d/auth-test-model-65387d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"05de8285-fb9a-45e6-ba43-e4d6d7663b2a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05de8285-fb9a-45e6-ba43-e4d6d7663b2a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05de8285-fb9a-45e6-ba43-e4d6d7663b2a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05de8285-fb9a-45e6-ba43-e4d6d7663b2a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05de8285-fb9a-45e6-ba43-e4d6d7663b2a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd282d49-547e-4554-9ffb-0e2418f0db0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47592","PortSpecifier":{"PortValue":47592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bd282d49-547e-4554-9ffb-0e2418f0db0c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd282d49-547e-4554-9ffb-0e2418f0db0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47592","PortSpecifier":{"PortValue":47592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783377866,"nanos":189699396},"http":{"id":"bd282d49-547e-4554-9ffb-0e2418f0db0c","method":"POST","headers":{":authority":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bd282d49-547e-4554-9ffb-0e2418f0db0c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bd282d49-547e-4554-9ffb-0e2418f0db0c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"011dc850-13ad-4879-b525-4b025a565c36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"]}} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bd282d49-547e-4554-9ffb-0e2418f0db0c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"011dc850-13ad-4879-b525-4b025a565c36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd282d49-547e-4554-9ffb-0e2418f0db0c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd282d49-547e-4554-9ffb-0e2418f0db0c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd282d49-547e-4554-9ffb-0e2418f0db0c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-944f9f/auth-test-model-944f9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bd282d49-547e-4554-9ffb-0e2418f0db0c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd282d49-547e-4554-9ffb-0e2418f0db0c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd282d49-547e-4554-9ffb-0e2418f0db0c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd282d49-547e-4554-9ffb-0e2418f0db0c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd282d49-547e-4554-9ffb-0e2418f0db0c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ebbc560-0dfb-4fe5-84e5-21e75fb97373","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47276","PortSpecifier":{"PortValue":47276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6ebbc560-0dfb-4fe5-84e5-21e75fb97373","method":"GET","path":"/maas-api/v1/api-keys/43369fa7-63f8-4eba-8d10-d15893d8e3b9","host":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ebbc560-0dfb-4fe5-84e5-21e75fb97373","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47276","PortSpecifier":{"PortValue":47276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783377866,"nanos":275126618},"http":{"id":"6ebbc560-0dfb-4fe5-84e5-21e75fb97373","method":"GET","headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/43369fa7-63f8-4eba-8d10-d15893d8e3b9",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6ebbc560-0dfb-4fe5-84e5-21e75fb97373","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6ebbc560-0dfb-4fe5-84e5-21e75fb97373","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"011dc850-13ad-4879-b525-4b025a565c36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"]}} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6ebbc560-0dfb-4fe5-84e5-21e75fb97373","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"011dc850-13ad-4879-b525-4b025a565c36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d154abbb9a8b96bb5c6e5e7241cade7cef39b6a6c696bf3e34e3dbb5833fa8f4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/43369fa7-63f8-4eba-8d10-d15893d8e3b9",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ebbc560-0dfb-4fe5-84e5-21e75fb97373","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ebbc560-0dfb-4fe5-84e5-21e75fb97373","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ebbc560-0dfb-4fe5-84e5-21e75fb97373","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-65387d/auth-test-model-65387d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6ebbc560-0dfb-4fe5-84e5-21e75fb97373","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ebbc560-0dfb-4fe5-84e5-21e75fb97373","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ebbc560-0dfb-4fe5-84e5-21e75fb97373","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ebbc560-0dfb-4fe5-84e5-21e75fb97373","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ebbc560-0dfb-4fe5-84e5-21e75fb97373","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c2c1cf1-2f55-4714-ab2f-a2c3b7b03d32","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47596","PortSpecifier":{"PortValue":47596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c2c1cf1-2f55-4714-ab2f-a2c3b7b03d32","method":"GET","path":"/maas-api/v1/api-keys/60f7bff7-ec0d-4da7-950c-46dbe8f99114","host":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c2c1cf1-2f55-4714-ab2f-a2c3b7b03d32","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47596","PortSpecifier":{"PortValue":47596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783377866,"nanos":310745620},"http":{"id":"0c2c1cf1-2f55-4714-ab2f-a2c3b7b03d32","method":"GET","headers":{":authority":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/60f7bff7-ec0d-4da7-950c-46dbe8f99114",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0c2c1cf1-2f55-4714-ab2f-a2c3b7b03d32","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c2c1cf1-2f55-4714-ab2f-a2c3b7b03d32","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"011dc850-13ad-4879-b525-4b025a565c36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"]}} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c2c1cf1-2f55-4714-ab2f-a2c3b7b03d32","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"011dc850-13ad-4879-b525-4b025a565c36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/60f7bff7-ec0d-4da7-950c-46dbe8f99114",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c2c1cf1-2f55-4714-ab2f-a2c3b7b03d32","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c2c1cf1-2f55-4714-ab2f-a2c3b7b03d32","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c2c1cf1-2f55-4714-ab2f-a2c3b7b03d32","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-944f9f/auth-test-model-944f9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0c2c1cf1-2f55-4714-ab2f-a2c3b7b03d32","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c2c1cf1-2f55-4714-ab2f-a2c3b7b03d32","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c2c1cf1-2f55-4714-ab2f-a2c3b7b03d32","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c2c1cf1-2f55-4714-ab2f-a2c3b7b03d32","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:44:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c2c1cf1-2f55-4714-ab2f-a2c3b7b03d32","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4e9554f-c9dd-4623-b16a-bcc9e6690018","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56520","PortSpecifier":{"PortValue":56520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c4e9554f-c9dd-4623-b16a-bcc9e6690018","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4e9554f-c9dd-4623-b16a-bcc9e6690018","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56520","PortSpecifier":{"PortValue":56520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783377881,"nanos":340936196},"http":{"id":"c4e9554f-c9dd-4623-b16a-bcc9e6690018","method":"POST","headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c4e9554f-c9dd-4623-b16a-bcc9e6690018","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c4e9554f-c9dd-4623-b16a-bcc9e6690018","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"011dc850-13ad-4879-b525-4b025a565c36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"]}} {"level":"debug","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c4e9554f-c9dd-4623-b16a-bcc9e6690018","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"011dc850-13ad-4879-b525-4b025a565c36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d154abbb9a8b96bb5c6e5e7241cade7cef39b6a6c696bf3e34e3dbb5833fa8f4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4e9554f-c9dd-4623-b16a-bcc9e6690018","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4e9554f-c9dd-4623-b16a-bcc9e6690018","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4e9554f-c9dd-4623-b16a-bcc9e6690018","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-65387d/auth-test-model-65387d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c4e9554f-c9dd-4623-b16a-bcc9e6690018","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4e9554f-c9dd-4623-b16a-bcc9e6690018","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4e9554f-c9dd-4623-b16a-bcc9e6690018","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4e9554f-c9dd-4623-b16a-bcc9e6690018","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4e9554f-c9dd-4623-b16a-bcc9e6690018","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"236f3589-9178-47df-ae9e-226e616d5193","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51842","PortSpecifier":{"PortValue":51842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"236f3589-9178-47df-ae9e-226e616d5193","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"236f3589-9178-47df-ae9e-226e616d5193","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51842","PortSpecifier":{"PortValue":51842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783377881,"nanos":379676905},"http":{"id":"236f3589-9178-47df-ae9e-226e616d5193","method":"POST","headers":{":authority":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"236f3589-9178-47df-ae9e-226e616d5193","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"236f3589-9178-47df-ae9e-226e616d5193","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"011dc850-13ad-4879-b525-4b025a565c36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"]}} {"level":"debug","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"236f3589-9178-47df-ae9e-226e616d5193","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"011dc850-13ad-4879-b525-4b025a565c36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"236f3589-9178-47df-ae9e-226e616d5193","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"236f3589-9178-47df-ae9e-226e616d5193","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"236f3589-9178-47df-ae9e-226e616d5193","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-944f9f/auth-test-model-944f9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"236f3589-9178-47df-ae9e-226e616d5193","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"236f3589-9178-47df-ae9e-226e616d5193","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"236f3589-9178-47df-ae9e-226e616d5193","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"236f3589-9178-47df-ae9e-226e616d5193","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"236f3589-9178-47df-ae9e-226e616d5193","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4e5f1b1-ade3-45ee-97f5-5a32d707f29e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56530","PortSpecifier":{"PortValue":56530}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d4e5f1b1-ade3-45ee-97f5-5a32d707f29e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4e5f1b1-ade3-45ee-97f5-5a32d707f29e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56530","PortSpecifier":{"PortValue":56530}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783377881,"nanos":428473348},"http":{"id":"d4e5f1b1-ade3-45ee-97f5-5a32d707f29e","method":"GET","headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d4e5f1b1-ade3-45ee-97f5-5a32d707f29e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1J3JBCOvDXUPFlyVx_9CrokdEiunYBGX1pWjm1WsfBnllI7HCRg9PyJjpQv2Q"} {"level":"debug","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d4e5f1b1-ade3-45ee-97f5-5a32d707f29e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-65387d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1J3JBCOvDXUPFlyVx_9CrokdEiunYBGX1pWjm1WsfBnllI7HCRg9PyJjpQv2Q\"}"} {"level":"debug","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d4e5f1b1-ade3-45ee-97f5-5a32d707f29e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-65387d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1dccbc70-bc08-423f-a6ca-b2bac79af16d","keyName":"e2e-auth-iso-a-450065","subscription":"e2e-auth-iso-901a9f","tenant":"e2e-shared-a-65387d","userId":"1dccbc70-bc08-423f-a6ca-b2bac79af16d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d4e5f1b1-ade3-45ee-97f5-5a32d707f29e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4e5f1b1-ade3-45ee-97f5-5a32d707f29e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4e5f1b1-ade3-45ee-97f5-5a32d707f29e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4e5f1b1-ade3-45ee-97f5-5a32d707f29e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-65387d/auth-test-model-65387d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d4e5f1b1-ade3-45ee-97f5-5a32d707f29e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4e5f1b1-ade3-45ee-97f5-5a32d707f29e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4e5f1b1-ade3-45ee-97f5-5a32d707f29e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4e5f1b1-ade3-45ee-97f5-5a32d707f29e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-901a9f"} {"level":"info","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4e5f1b1-ade3-45ee-97f5-5a32d707f29e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:44:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4e5f1b1-ade3-45ee-97f5-5a32d707f29e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:44:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec1080f0-f463-44f3-b364-117f8a1916a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41262","PortSpecifier":{"PortValue":41262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ec1080f0-f463-44f3-b364-117f8a1916a5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:44:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec1080f0-f463-44f3-b364-117f8a1916a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41262","PortSpecifier":{"PortValue":41262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783377896,"nanos":431145131},"http":{"id":"ec1080f0-f463-44f3-b364-117f8a1916a5","method":"POST","headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:44:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ec1080f0-f463-44f3-b364-117f8a1916a5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:44:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ec1080f0-f463-44f3-b364-117f8a1916a5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"011dc850-13ad-4879-b525-4b025a565c36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"]}} {"level":"debug","ts":"2026-07-06T22:44:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ec1080f0-f463-44f3-b364-117f8a1916a5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"011dc850-13ad-4879-b525-4b025a565c36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d154abbb9a8b96bb5c6e5e7241cade7cef39b6a6c696bf3e34e3dbb5833fa8f4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:44:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec1080f0-f463-44f3-b364-117f8a1916a5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:44:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec1080f0-f463-44f3-b364-117f8a1916a5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:44:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec1080f0-f463-44f3-b364-117f8a1916a5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-65387d/auth-test-model-65387d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:44:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ec1080f0-f463-44f3-b364-117f8a1916a5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:44:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec1080f0-f463-44f3-b364-117f8a1916a5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T22:44:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec1080f0-f463-44f3-b364-117f8a1916a5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T22:44:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec1080f0-f463-44f3-b364-117f8a1916a5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:44:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec1080f0-f463-44f3-b364-117f8a1916a5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:44:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f56ebfc9-b459-4233-8e96-e09dffffd870","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49124","PortSpecifier":{"PortValue":49124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f56ebfc9-b459-4233-8e96-e09dffffd870","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:44:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f56ebfc9-b459-4233-8e96-e09dffffd870","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49124","PortSpecifier":{"PortValue":49124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783377896,"nanos":466485215},"http":{"id":"f56ebfc9-b459-4233-8e96-e09dffffd870","method":"POST","headers":{":authority":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:44:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f56ebfc9-b459-4233-8e96-e09dffffd870","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:44:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f56ebfc9-b459-4233-8e96-e09dffffd870","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"011dc850-13ad-4879-b525-4b025a565c36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"]}} {"level":"debug","ts":"2026-07-06T22:44:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f56ebfc9-b459-4233-8e96-e09dffffd870","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"011dc850-13ad-4879-b525-4b025a565c36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:44:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f56ebfc9-b459-4233-8e96-e09dffffd870","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:44:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f56ebfc9-b459-4233-8e96-e09dffffd870","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:44:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f56ebfc9-b459-4233-8e96-e09dffffd870","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-944f9f/auth-test-model-944f9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:44:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f56ebfc9-b459-4233-8e96-e09dffffd870","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:44:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f56ebfc9-b459-4233-8e96-e09dffffd870","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:44:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f56ebfc9-b459-4233-8e96-e09dffffd870","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:44:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f56ebfc9-b459-4233-8e96-e09dffffd870","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:44:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f56ebfc9-b459-4233-8e96-e09dffffd870","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:44:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90a032f1-ba7f-4f46-9ff9-dff9ad5e44a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49126","PortSpecifier":{"PortValue":49126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"90a032f1-ba7f-4f46-9ff9-dff9ad5e44a1","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:44:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90a032f1-ba7f-4f46-9ff9-dff9ad5e44a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49126","PortSpecifier":{"PortValue":49126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783377896,"nanos":507501459},"http":{"id":"90a032f1-ba7f-4f46-9ff9-dff9ad5e44a1","method":"GET","headers":{":authority":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:44:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"90a032f1-ba7f-4f46-9ff9-dff9ad5e44a1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-l7PxYEGGgkGPfqSI_wQvSdxIEVbtO8Jrt3kMT9G0EGAUBnUZNColvCX6IAWL"} {"level":"debug","ts":"2026-07-06T22:44:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"90a032f1-ba7f-4f46-9ff9-dff9ad5e44a1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-944f9f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-l7PxYEGGgkGPfqSI_wQvSdxIEVbtO8Jrt3kMT9G0EGAUBnUZNColvCX6IAWL\"}"} {"level":"debug","ts":"2026-07-06T22:44:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"90a032f1-ba7f-4f46-9ff9-dff9ad5e44a1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-944f9f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-06T22:44:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"90a032f1-ba7f-4f46-9ff9-dff9ad5e44a1","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:44:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"90a032f1-ba7f-4f46-9ff9-dff9ad5e44a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-06T22:44:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90a032f1-ba7f-4f46-9ff9-dff9ad5e44a1","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-06T22:44:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90a032f1-ba7f-4f46-9ff9-dff9ad5e44a1","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}} {"level":"info","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71cbe9c1-5492-4d66-bc4d-aed87a29a0a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44850","PortSpecifier":{"PortValue":44850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71cbe9c1-5492-4d66-bc4d-aed87a29a0a3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71cbe9c1-5492-4d66-bc4d-aed87a29a0a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44850","PortSpecifier":{"PortValue":44850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783377913,"nanos":570656464},"http":{"id":"71cbe9c1-5492-4d66-bc4d-aed87a29a0a3","method":"POST","headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"71cbe9c1-5492-4d66-bc4d-aed87a29a0a3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71cbe9c1-5492-4d66-bc4d-aed87a29a0a3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"011dc850-13ad-4879-b525-4b025a565c36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"]}} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71cbe9c1-5492-4d66-bc4d-aed87a29a0a3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"011dc850-13ad-4879-b525-4b025a565c36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d154abbb9a8b96bb5c6e5e7241cade7cef39b6a6c696bf3e34e3dbb5833fa8f4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71cbe9c1-5492-4d66-bc4d-aed87a29a0a3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71cbe9c1-5492-4d66-bc4d-aed87a29a0a3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71cbe9c1-5492-4d66-bc4d-aed87a29a0a3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-65387d/auth-test-model-65387d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"71cbe9c1-5492-4d66-bc4d-aed87a29a0a3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71cbe9c1-5492-4d66-bc4d-aed87a29a0a3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71cbe9c1-5492-4d66-bc4d-aed87a29a0a3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71cbe9c1-5492-4d66-bc4d-aed87a29a0a3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71cbe9c1-5492-4d66-bc4d-aed87a29a0a3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f25a0e48-e3c1-4c5a-8849-a0a10f55ef6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43966","PortSpecifier":{"PortValue":43966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f25a0e48-e3c1-4c5a-8849-a0a10f55ef6a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f25a0e48-e3c1-4c5a-8849-a0a10f55ef6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43966","PortSpecifier":{"PortValue":43966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783377913,"nanos":601416587},"http":{"id":"f25a0e48-e3c1-4c5a-8849-a0a10f55ef6a","method":"POST","headers":{":authority":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f25a0e48-e3c1-4c5a-8849-a0a10f55ef6a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f25a0e48-e3c1-4c5a-8849-a0a10f55ef6a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"011dc850-13ad-4879-b525-4b025a565c36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"]}} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f25a0e48-e3c1-4c5a-8849-a0a10f55ef6a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"011dc850-13ad-4879-b525-4b025a565c36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f25a0e48-e3c1-4c5a-8849-a0a10f55ef6a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f25a0e48-e3c1-4c5a-8849-a0a10f55ef6a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f25a0e48-e3c1-4c5a-8849-a0a10f55ef6a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-944f9f/auth-test-model-944f9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f25a0e48-e3c1-4c5a-8849-a0a10f55ef6a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f25a0e48-e3c1-4c5a-8849-a0a10f55ef6a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f25a0e48-e3c1-4c5a-8849-a0a10f55ef6a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f25a0e48-e3c1-4c5a-8849-a0a10f55ef6a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f25a0e48-e3c1-4c5a-8849-a0a10f55ef6a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c92d7ed-7b64-4bb7-bd18-463a764142c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44858","PortSpecifier":{"PortValue":44858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6c92d7ed-7b64-4bb7-bd18-463a764142c8","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c92d7ed-7b64-4bb7-bd18-463a764142c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44858","PortSpecifier":{"PortValue":44858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783377913,"nanos":639753890},"http":{"id":"6c92d7ed-7b64-4bb7-bd18-463a764142c8","method":"POST","headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6c92d7ed-7b64-4bb7-bd18-463a764142c8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6c92d7ed-7b64-4bb7-bd18-463a764142c8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"011dc850-13ad-4879-b525-4b025a565c36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"]}} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6c92d7ed-7b64-4bb7-bd18-463a764142c8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"011dc850-13ad-4879-b525-4b025a565c36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d154abbb9a8b96bb5c6e5e7241cade7cef39b6a6c696bf3e34e3dbb5833fa8f4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c92d7ed-7b64-4bb7-bd18-463a764142c8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c92d7ed-7b64-4bb7-bd18-463a764142c8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c92d7ed-7b64-4bb7-bd18-463a764142c8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-65387d/auth-test-model-65387d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6c92d7ed-7b64-4bb7-bd18-463a764142c8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c92d7ed-7b64-4bb7-bd18-463a764142c8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c92d7ed-7b64-4bb7-bd18-463a764142c8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c92d7ed-7b64-4bb7-bd18-463a764142c8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c92d7ed-7b64-4bb7-bd18-463a764142c8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fb34379-6694-45ee-bdcc-2219f26d3f25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43968","PortSpecifier":{"PortValue":43968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8fb34379-6694-45ee-bdcc-2219f26d3f25","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fb34379-6694-45ee-bdcc-2219f26d3f25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43968","PortSpecifier":{"PortValue":43968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783377913,"nanos":676962995},"http":{"id":"8fb34379-6694-45ee-bdcc-2219f26d3f25","method":"POST","headers":{":authority":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8fb34379-6694-45ee-bdcc-2219f26d3f25","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8fb34379-6694-45ee-bdcc-2219f26d3f25","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"011dc850-13ad-4879-b525-4b025a565c36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"]}} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8fb34379-6694-45ee-bdcc-2219f26d3f25","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"011dc850-13ad-4879-b525-4b025a565c36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fb34379-6694-45ee-bdcc-2219f26d3f25","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fb34379-6694-45ee-bdcc-2219f26d3f25","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fb34379-6694-45ee-bdcc-2219f26d3f25","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-944f9f/auth-test-model-944f9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8fb34379-6694-45ee-bdcc-2219f26d3f25","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fb34379-6694-45ee-bdcc-2219f26d3f25","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fb34379-6694-45ee-bdcc-2219f26d3f25","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fb34379-6694-45ee-bdcc-2219f26d3f25","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:45:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fb34379-6694-45ee-bdcc-2219f26d3f25","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:45:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48ac31ed-f9bf-47bd-89ff-15b4bb5f96ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53108","PortSpecifier":{"PortValue":53108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"48ac31ed-f9bf-47bd-89ff-15b4bb5f96ca","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:45:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48ac31ed-f9bf-47bd-89ff-15b4bb5f96ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53108","PortSpecifier":{"PortValue":53108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783377930,"nanos":927953228},"http":{"id":"48ac31ed-f9bf-47bd-89ff-15b4bb5f96ca","method":"POST","headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:45:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"48ac31ed-f9bf-47bd-89ff-15b4bb5f96ca","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:45:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"48ac31ed-f9bf-47bd-89ff-15b4bb5f96ca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"011dc850-13ad-4879-b525-4b025a565c36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"]}} {"level":"debug","ts":"2026-07-06T22:45:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"48ac31ed-f9bf-47bd-89ff-15b4bb5f96ca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"011dc850-13ad-4879-b525-4b025a565c36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d154abbb9a8b96bb5c6e5e7241cade7cef39b6a6c696bf3e34e3dbb5833fa8f4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:45:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48ac31ed-f9bf-47bd-89ff-15b4bb5f96ca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:45:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48ac31ed-f9bf-47bd-89ff-15b4bb5f96ca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:45:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48ac31ed-f9bf-47bd-89ff-15b4bb5f96ca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-65387d/auth-test-model-65387d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:45:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"48ac31ed-f9bf-47bd-89ff-15b4bb5f96ca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:45:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48ac31ed-f9bf-47bd-89ff-15b4bb5f96ca","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:45:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48ac31ed-f9bf-47bd-89ff-15b4bb5f96ca","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:45:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48ac31ed-f9bf-47bd-89ff-15b4bb5f96ca","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:45:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48ac31ed-f9bf-47bd-89ff-15b4bb5f96ca","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:45:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2c3c11e-ff88-48d3-9234-511d36728e70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36638","PortSpecifier":{"PortValue":36638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d2c3c11e-ff88-48d3-9234-511d36728e70","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:45:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2c3c11e-ff88-48d3-9234-511d36728e70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36638","PortSpecifier":{"PortValue":36638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783377930,"nanos":962282105},"http":{"id":"d2c3c11e-ff88-48d3-9234-511d36728e70","method":"POST","headers":{":authority":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:45:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d2c3c11e-ff88-48d3-9234-511d36728e70","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:45:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d2c3c11e-ff88-48d3-9234-511d36728e70","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"011dc850-13ad-4879-b525-4b025a565c36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"]}} {"level":"debug","ts":"2026-07-06T22:45:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d2c3c11e-ff88-48d3-9234-511d36728e70","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"011dc850-13ad-4879-b525-4b025a565c36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:45:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2c3c11e-ff88-48d3-9234-511d36728e70","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:45:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2c3c11e-ff88-48d3-9234-511d36728e70","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:45:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2c3c11e-ff88-48d3-9234-511d36728e70","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-944f9f/auth-test-model-944f9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:45:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d2c3c11e-ff88-48d3-9234-511d36728e70","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:45:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2c3c11e-ff88-48d3-9234-511d36728e70","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:45:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2c3c11e-ff88-48d3-9234-511d36728e70","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:45:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2c3c11e-ff88-48d3-9234-511d36728e70","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:45:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2c3c11e-ff88-48d3-9234-511d36728e70","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:45:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5eabf7a9-8d98-41fd-bedc-f417e40759cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36648","PortSpecifier":{"PortValue":36648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5eabf7a9-8d98-41fd-bedc-f417e40759cc","method":"GET","path":"/maas-api/v1/api-keys/71d712f6-9d65-404e-a700-54054efb5ab1","host":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:45:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5eabf7a9-8d98-41fd-bedc-f417e40759cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36648","PortSpecifier":{"PortValue":36648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783377930,"nanos":996008289},"http":{"id":"5eabf7a9-8d98-41fd-bedc-f417e40759cc","method":"GET","headers":{":authority":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/71d712f6-9d65-404e-a700-54054efb5ab1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:45:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5eabf7a9-8d98-41fd-bedc-f417e40759cc","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:45:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5eabf7a9-8d98-41fd-bedc-f417e40759cc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"011dc850-13ad-4879-b525-4b025a565c36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"]}} {"level":"debug","ts":"2026-07-06T22:45:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5eabf7a9-8d98-41fd-bedc-f417e40759cc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"011dc850-13ad-4879-b525-4b025a565c36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/71d712f6-9d65-404e-a700-54054efb5ab1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:45:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5eabf7a9-8d98-41fd-bedc-f417e40759cc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:45:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5eabf7a9-8d98-41fd-bedc-f417e40759cc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:45:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5eabf7a9-8d98-41fd-bedc-f417e40759cc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-944f9f/auth-test-model-944f9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:45:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5eabf7a9-8d98-41fd-bedc-f417e40759cc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:45:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5eabf7a9-8d98-41fd-bedc-f417e40759cc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:45:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5eabf7a9-8d98-41fd-bedc-f417e40759cc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:45:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5eabf7a9-8d98-41fd-bedc-f417e40759cc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:45:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5eabf7a9-8d98-41fd-bedc-f417e40759cc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:45:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42543132-26a2-4a9b-864a-5132957bcef8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53124","PortSpecifier":{"PortValue":53124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"42543132-26a2-4a9b-864a-5132957bcef8","method":"GET","path":"/maas-api/v1/api-keys/71d712f6-9d65-404e-a700-54054efb5ab1","host":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:45:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42543132-26a2-4a9b-864a-5132957bcef8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53124","PortSpecifier":{"PortValue":53124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783377931,"nanos":25186538},"http":{"id":"42543132-26a2-4a9b-864a-5132957bcef8","method":"GET","headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/71d712f6-9d65-404e-a700-54054efb5ab1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:45:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"42543132-26a2-4a9b-864a-5132957bcef8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:45:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"42543132-26a2-4a9b-864a-5132957bcef8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"011dc850-13ad-4879-b525-4b025a565c36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"]}} {"level":"debug","ts":"2026-07-06T22:45:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"42543132-26a2-4a9b-864a-5132957bcef8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"011dc850-13ad-4879-b525-4b025a565c36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d154abbb9a8b96bb5c6e5e7241cade7cef39b6a6c696bf3e34e3dbb5833fa8f4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/71d712f6-9d65-404e-a700-54054efb5ab1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:45:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42543132-26a2-4a9b-864a-5132957bcef8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:45:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42543132-26a2-4a9b-864a-5132957bcef8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:45:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42543132-26a2-4a9b-864a-5132957bcef8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-65387d/auth-test-model-65387d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:45:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"42543132-26a2-4a9b-864a-5132957bcef8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:45:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42543132-26a2-4a9b-864a-5132957bcef8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T22:45:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42543132-26a2-4a9b-864a-5132957bcef8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T22:45:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42543132-26a2-4a9b-864a-5132957bcef8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:45:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42543132-26a2-4a9b-864a-5132957bcef8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6b5721d-a945-43cf-8ad8-da10bbf28b5f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45628","PortSpecifier":{"PortValue":45628}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b6b5721d-a945-43cf-8ad8-da10bbf28b5f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6b5721d-a945-43cf-8ad8-da10bbf28b5f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45628","PortSpecifier":{"PortValue":45628}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783377946,"nanos":47586425},"http":{"id":"b6b5721d-a945-43cf-8ad8-da10bbf28b5f","method":"POST","headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b6b5721d-a945-43cf-8ad8-da10bbf28b5f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b6b5721d-a945-43cf-8ad8-da10bbf28b5f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"011dc850-13ad-4879-b525-4b025a565c36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"]}} {"level":"debug","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b6b5721d-a945-43cf-8ad8-da10bbf28b5f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"011dc850-13ad-4879-b525-4b025a565c36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d154abbb9a8b96bb5c6e5e7241cade7cef39b6a6c696bf3e34e3dbb5833fa8f4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6b5721d-a945-43cf-8ad8-da10bbf28b5f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6b5721d-a945-43cf-8ad8-da10bbf28b5f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6b5721d-a945-43cf-8ad8-da10bbf28b5f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-65387d/auth-test-model-65387d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b6b5721d-a945-43cf-8ad8-da10bbf28b5f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6b5721d-a945-43cf-8ad8-da10bbf28b5f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6b5721d-a945-43cf-8ad8-da10bbf28b5f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6b5721d-a945-43cf-8ad8-da10bbf28b5f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6b5721d-a945-43cf-8ad8-da10bbf28b5f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2026ff3c-cabc-48a7-a3ea-80ed50d9176d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50732","PortSpecifier":{"PortValue":50732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2026ff3c-cabc-48a7-a3ea-80ed50d9176d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2026ff3c-cabc-48a7-a3ea-80ed50d9176d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50732","PortSpecifier":{"PortValue":50732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783377946,"nanos":77870066},"http":{"id":"2026ff3c-cabc-48a7-a3ea-80ed50d9176d","method":"POST","headers":{":authority":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2026ff3c-cabc-48a7-a3ea-80ed50d9176d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2026ff3c-cabc-48a7-a3ea-80ed50d9176d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"011dc850-13ad-4879-b525-4b025a565c36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"]}} {"level":"debug","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2026ff3c-cabc-48a7-a3ea-80ed50d9176d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"011dc850-13ad-4879-b525-4b025a565c36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2026ff3c-cabc-48a7-a3ea-80ed50d9176d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2026ff3c-cabc-48a7-a3ea-80ed50d9176d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2026ff3c-cabc-48a7-a3ea-80ed50d9176d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-944f9f/auth-test-model-944f9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2026ff3c-cabc-48a7-a3ea-80ed50d9176d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2026ff3c-cabc-48a7-a3ea-80ed50d9176d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2026ff3c-cabc-48a7-a3ea-80ed50d9176d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2026ff3c-cabc-48a7-a3ea-80ed50d9176d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2026ff3c-cabc-48a7-a3ea-80ed50d9176d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b1089de-0886-4847-a281-6cc4e1eb5b1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45640","PortSpecifier":{"PortValue":45640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4b1089de-0886-4847-a281-6cc4e1eb5b1a","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b1089de-0886-4847-a281-6cc4e1eb5b1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45640","PortSpecifier":{"PortValue":45640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783377946,"nanos":115544497},"http":{"id":"4b1089de-0886-4847-a281-6cc4e1eb5b1a","method":"POST","headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4b1089de-0886-4847-a281-6cc4e1eb5b1a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-d1EkdMpMh8EOgge7_Cbm38JPM3XZuWxdKGdnazkM9akpEGyX3JvygTFen9br"} {"level":"debug","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4b1089de-0886-4847-a281-6cc4e1eb5b1a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-65387d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-d1EkdMpMh8EOgge7_Cbm38JPM3XZuWxdKGdnazkM9akpEGyX3JvygTFen9br\"}"} {"level":"debug","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4b1089de-0886-4847-a281-6cc4e1eb5b1a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-65387d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9e103fd1-4cb7-47fc-8e92-4ac68532dfd5","keyName":"e2e-auth-iso-a-056db0","subscription":"e2e-auth-iso-f4fb1e","tenant":"e2e-shared-a-65387d","userId":"9e103fd1-4cb7-47fc-8e92-4ac68532dfd5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4b1089de-0886-4847-a281-6cc4e1eb5b1a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b1089de-0886-4847-a281-6cc4e1eb5b1a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b1089de-0886-4847-a281-6cc4e1eb5b1a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b1089de-0886-4847-a281-6cc4e1eb5b1a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-65387d/auth-test-model-65387d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b1089de-0886-4847-a281-6cc4e1eb5b1a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4b1089de-0886-4847-a281-6cc4e1eb5b1a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b1089de-0886-4847-a281-6cc4e1eb5b1a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b1089de-0886-4847-a281-6cc4e1eb5b1a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-f4fb1e"} {"level":"info","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b1089de-0886-4847-a281-6cc4e1eb5b1a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:45:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b1089de-0886-4847-a281-6cc4e1eb5b1a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83b114d7d6f909e8d64cd7e74f221a5eccc9987240157a5f96a7a4bb94c7f604"} {"level":"info","ts":"2026-07-06T22:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24ad645842da832c167a545963b852dc0f97991c0e66c1aea1f1cacc94224da2"} {"level":"info","ts":"2026-07-06T22:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17ad4f876d7da8460377e2eba853619f9b2913fea40a84bda98b828d29567df6"} {"level":"info","ts":"2026-07-06T22:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3d6c5fa49756e2780cc3fa80605c774aea0227ffc946eb8daf97dc272077c83"} {"level":"info","ts":"2026-07-06T22:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68dbd6b1b04ff73d1f2764bac5f08357901e2f0fe519623bc93084594b4e063c"} {"level":"info","ts":"2026-07-06T22:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8fb70b8677fe12499b08c828342c8aaab5af98d5ad6237c1881c404458120b2d"} {"level":"info","ts":"2026-07-06T22:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0509500cb92cb23d8666daa676789f2d21e3940ef6ece1b6485ee80c0429d181"} {"level":"info","ts":"2026-07-06T22:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d3b397a52f2c2a916c8ded10c2c66af79e95075f658068759a74861478f5f79"} {"level":"info","ts":"2026-07-06T22:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e9e8ab7cdc391a2f269fae2976401a8ed34df266d5f3d3b0030cc62c3a3a6a5"} {"level":"info","ts":"2026-07-06T22:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b8a7803ffbb7b4dc94a3ce9af2b8b91047d8d5fd54a5d227b59a3ad296cdb83"} {"level":"info","ts":"2026-07-06T22:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7cb15c0b24cd72f45f0e07e075213930e0bf9394a814c73e213dc060a13d463d"} {"level":"info","ts":"2026-07-06T22:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf3c72f1c35c4d98c607d3c6f9ff59d11f445bb5fce4928fd801e80f45b866ec"} {"level":"info","ts":"2026-07-06T22:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0030a4983146f6fda8f3e3ab8f2d034e300ffcec4fc0f9071d8a2d8037f6b658"} {"level":"info","ts":"2026-07-06T22:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8cd4997fa47f34fcc18f3bf2583fa3c9a5cc49acccc75ecd0f4319de49b3f754"} {"level":"info","ts":"2026-07-06T22:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78d448013edd22147a3fc030426cfa6ddc7c9387299f28e3da96c705930aa268"} {"level":"info","ts":"2026-07-06T22:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/154ff04b14a5fbbf08c48c23583930797974b0cb1eaaf0709b5c185a40a04f6b"} {"level":"debug","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9df7c7021642a8872d74215b3b8f40707a4b5e20d2b23b3bfd906d02f522963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9df7c7021642a8872d74215b3b8f40707a4b5e20d2b23b3bfd906d02f522963","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9df7c7021642a8872d74215b3b8f40707a4b5e20d2b23b3bfd906d02f522963","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9df7c7021642a8872d74215b3b8f40707a4b5e20d2b23b3bfd906d02f522963","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9df7c7021642a8872d74215b3b8f40707a4b5e20d2b23b3bfd906d02f522963"} {"level":"debug","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9df7c7021642a8872d74215b3b8f40707a4b5e20d2b23b3bfd906d02f522963","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9df7c7021642a8872d74215b3b8f40707a4b5e20d2b23b3bfd906d02f522963"} {"level":"debug","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9df7c7021642a8872d74215b3b8f40707a4b5e20d2b23b3bfd906d02f522963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9df7c7021642a8872d74215b3b8f40707a4b5e20d2b23b3bfd906d02f522963"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9df7c7021642a8872d74215b3b8f40707a4b5e20d2b23b3bfd906d02f522963","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9df7c7021642a8872d74215b3b8f40707a4b5e20d2b23b3bfd906d02f522963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9df7c7021642a8872d74215b3b8f40707a4b5e20d2b23b3bfd906d02f522963","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9df7c7021642a8872d74215b3b8f40707a4b5e20d2b23b3bfd906d02f522963","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9df7c7021642a8872d74215b3b8f40707a4b5e20d2b23b3bfd906d02f522963","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9df7c7021642a8872d74215b3b8f40707a4b5e20d2b23b3bfd906d02f522963"} {"level":"debug","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9df7c7021642a8872d74215b3b8f40707a4b5e20d2b23b3bfd906d02f522963","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9df7c7021642a8872d74215b3b8f40707a4b5e20d2b23b3bfd906d02f522963"} {"level":"debug","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9df7c7021642a8872d74215b3b8f40707a4b5e20d2b23b3bfd906d02f522963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9df7c7021642a8872d74215b3b8f40707a4b5e20d2b23b3bfd906d02f522963"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9df7c7021642a8872d74215b3b8f40707a4b5e20d2b23b3bfd906d02f522963","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9df7c7021642a8872d74215b3b8f40707a4b5e20d2b23b3bfd906d02f522963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9df7c7021642a8872d74215b3b8f40707a4b5e20d2b23b3bfd906d02f522963","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9df7c7021642a8872d74215b3b8f40707a4b5e20d2b23b3bfd906d02f522963","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9df7c7021642a8872d74215b3b8f40707a4b5e20d2b23b3bfd906d02f522963","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39eb6de22fe7f67d74c9a5958c46d977958b4693544f1802f559d1a96ba7fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9df7c7021642a8872d74215b3b8f40707a4b5e20d2b23b3bfd906d02f522963"} {"level":"info","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a39eb6de22fe7f67d74c9a5958c46d977958b4693544f1802f559d1a96ba7fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39eb6de22fe7f67d74c9a5958c46d977958b4693544f1802f559d1a96ba7fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39eb6de22fe7f67d74c9a5958c46d977958b4693544f1802f559d1a96ba7fac"} {"level":"info","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a39eb6de22fe7f67d74c9a5958c46d977958b4693544f1802f559d1a96ba7fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9df7c7021642a8872d74215b3b8f40707a4b5e20d2b23b3bfd906d02f522963","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39eb6de22fe7f67d74c9a5958c46d977958b4693544f1802f559d1a96ba7fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a39eb6de22fe7f67d74c9a5958c46d977958b4693544f1802f559d1a96ba7fac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a39eb6de22fe7f67d74c9a5958c46d977958b4693544f1802f559d1a96ba7fac","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a39eb6de22fe7f67d74c9a5958c46d977958b4693544f1802f559d1a96ba7fac\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39eb6de22fe7f67d74c9a5958c46d977958b4693544f1802f559d1a96ba7fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a39eb6de22fe7f67d74c9a5958c46d977958b4693544f1802f559d1a96ba7fac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9df7c7021642a8872d74215b3b8f40707a4b5e20d2b23b3bfd906d02f522963"} {"level":"info","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a39eb6de22fe7f67d74c9a5958c46d977958b4693544f1802f559d1a96ba7fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39eb6de22fe7f67d74c9a5958c46d977958b4693544f1802f559d1a96ba7fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39eb6de22fe7f67d74c9a5958c46d977958b4693544f1802f559d1a96ba7fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a39eb6de22fe7f67d74c9a5958c46d977958b4693544f1802f559d1a96ba7fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39eb6de22fe7f67d74c9a5958c46d977958b4693544f1802f559d1a96ba7fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a39eb6de22fe7f67d74c9a5958c46d977958b4693544f1802f559d1a96ba7fac","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a39eb6de22fe7f67d74c9a5958c46d977958b4693544f1802f559d1a96ba7fac\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9df7c7021642a8872d74215b3b8f40707a4b5e20d2b23b3bfd906d02f522963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9df7c7021642a8872d74215b3b8f40707a4b5e20d2b23b3bfd906d02f522963"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39eb6de22fe7f67d74c9a5958c46d977958b4693544f1802f559d1a96ba7fac"} {"level":"info","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9df7c7021642a8872d74215b3b8f40707a4b5e20d2b23b3bfd906d02f522963","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39eb6de22fe7f67d74c9a5958c46d977958b4693544f1802f559d1a96ba7fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9df7c7021642a8872d74215b3b8f40707a4b5e20d2b23b3bfd906d02f522963","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39eb6de22fe7f67d74c9a5958c46d977958b4693544f1802f559d1a96ba7fac"} {"level":"info","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9df7c7021642a8872d74215b3b8f40707a4b5e20d2b23b3bfd906d02f522963"} {"level":"debug","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39eb6de22fe7f67d74c9a5958c46d977958b4693544f1802f559d1a96ba7fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a39eb6de22fe7f67d74c9a5958c46d977958b4693544f1802f559d1a96ba7fac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a39eb6de22fe7f67d74c9a5958c46d977958b4693544f1802f559d1a96ba7fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39eb6de22fe7f67d74c9a5958c46d977958b4693544f1802f559d1a96ba7fac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39eb6de22fe7f67d74c9a5958c46d977958b4693544f1802f559d1a96ba7fac"} {"level":"debug","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6596c7d4b4de6b0ce9201452e74fb23101d532e60756bb491b4cade676bab2d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6596c7d4b4de6b0ce9201452e74fb23101d532e60756bb491b4cade676bab2d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6596c7d4b4de6b0ce9201452e74fb23101d532e60756bb491b4cade676bab2d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6596c7d4b4de6b0ce9201452e74fb23101d532e60756bb491b4cade676bab2d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6596c7d4b4de6b0ce9201452e74fb23101d532e60756bb491b4cade676bab2d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6596c7d4b4de6b0ce9201452e74fb23101d532e60756bb491b4cade676bab2d9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6596c7d4b4de6b0ce9201452e74fb23101d532e60756bb491b4cade676bab2d9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6596c7d4b4de6b0ce9201452e74fb23101d532e60756bb491b4cade676bab2d9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6596c7d4b4de6b0ce9201452e74fb23101d532e60756bb491b4cade676bab2d9"} {"level":"debug","ts":"2026-07-06T22:46:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6596c7d4b4de6b0ce9201452e74fb23101d532e60756bb491b4cade676bab2d9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6596c7d4b4de6b0ce9201452e74fb23101d532e60756bb491b4cade676bab2d9"} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eed53d81e72daa16ed974b723463c1d0aae1b830181c9786e4f72598efa0cb42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eed53d81e72daa16ed974b723463c1d0aae1b830181c9786e4f72598efa0cb42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eed53d81e72daa16ed974b723463c1d0aae1b830181c9786e4f72598efa0cb42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6596c7d4b4de6b0ce9201452e74fb23101d532e60756bb491b4cade676bab2d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6596c7d4b4de6b0ce9201452e74fb23101d532e60756bb491b4cade676bab2d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eed53d81e72daa16ed974b723463c1d0aae1b830181c9786e4f72598efa0cb42"} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6596c7d4b4de6b0ce9201452e74fb23101d532e60756bb491b4cade676bab2d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eed53d81e72daa16ed974b723463c1d0aae1b830181c9786e4f72598efa0cb42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6596c7d4b4de6b0ce9201452e74fb23101d532e60756bb491b4cade676bab2d9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eed53d81e72daa16ed974b723463c1d0aae1b830181c9786e4f72598efa0cb42"} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eed53d81e72daa16ed974b723463c1d0aae1b830181c9786e4f72598efa0cb42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eed53d81e72daa16ed974b723463c1d0aae1b830181c9786e4f72598efa0cb42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eed53d81e72daa16ed974b723463c1d0aae1b830181c9786e4f72598efa0cb42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eed53d81e72daa16ed974b723463c1d0aae1b830181c9786e4f72598efa0cb42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6596c7d4b4de6b0ce9201452e74fb23101d532e60756bb491b4cade676bab2d9"} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eed53d81e72daa16ed974b723463c1d0aae1b830181c9786e4f72598efa0cb42"} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38e0c191f7161ac70486acf3cff1e6cb09ed0a9fe4496f99461792da4cfbcde9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38e0c191f7161ac70486acf3cff1e6cb09ed0a9fe4496f99461792da4cfbcde9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38e0c191f7161ac70486acf3cff1e6cb09ed0a9fe4496f99461792da4cfbcde9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38e0c191f7161ac70486acf3cff1e6cb09ed0a9fe4496f99461792da4cfbcde9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38e0c191f7161ac70486acf3cff1e6cb09ed0a9fe4496f99461792da4cfbcde9"} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38e0c191f7161ac70486acf3cff1e6cb09ed0a9fe4496f99461792da4cfbcde9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38e0c191f7161ac70486acf3cff1e6cb09ed0a9fe4496f99461792da4cfbcde9"} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38e0c191f7161ac70486acf3cff1e6cb09ed0a9fe4496f99461792da4cfbcde9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38e0c191f7161ac70486acf3cff1e6cb09ed0a9fe4496f99461792da4cfbcde9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38e0c191f7161ac70486acf3cff1e6cb09ed0a9fe4496f99461792da4cfbcde9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f9f19a2192a85695d2320c31db10af4b4d3ea5249115ccddb16717bf3330b76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f9f19a2192a85695d2320c31db10af4b4d3ea5249115ccddb16717bf3330b76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38e0c191f7161ac70486acf3cff1e6cb09ed0a9fe4496f99461792da4cfbcde9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f9f19a2192a85695d2320c31db10af4b4d3ea5249115ccddb16717bf3330b76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f9f19a2192a85695d2320c31db10af4b4d3ea5249115ccddb16717bf3330b76"} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f9f19a2192a85695d2320c31db10af4b4d3ea5249115ccddb16717bf3330b76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f9f19a2192a85695d2320c31db10af4b4d3ea5249115ccddb16717bf3330b76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f9f19a2192a85695d2320c31db10af4b4d3ea5249115ccddb16717bf3330b76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f9f19a2192a85695d2320c31db10af4b4d3ea5249115ccddb16717bf3330b76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38e0c191f7161ac70486acf3cff1e6cb09ed0a9fe4496f99461792da4cfbcde9"} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f9f19a2192a85695d2320c31db10af4b4d3ea5249115ccddb16717bf3330b76"} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbd122e4f2a05d78cdd6b2c9dcf019498d2b4bc2c6b107485ca19aa2bac2bafd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbd122e4f2a05d78cdd6b2c9dcf019498d2b4bc2c6b107485ca19aa2bac2bafd"} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbd122e4f2a05d78cdd6b2c9dcf019498d2b4bc2c6b107485ca19aa2bac2bafd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c"} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbd122e4f2a05d78cdd6b2c9dcf019498d2b4bc2c6b107485ca19aa2bac2bafd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbd122e4f2a05d78cdd6b2c9dcf019498d2b4bc2c6b107485ca19aa2bac2bafd"} {"level":"error","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbd122e4f2a05d78cdd6b2c9dcf019498d2b4bc2c6b107485ca19aa2bac2bafd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbd122e4f2a05d78cdd6b2c9dcf019498d2b4bc2c6b107485ca19aa2bac2bafd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbd122e4f2a05d78cdd6b2c9dcf019498d2b4bc2c6b107485ca19aa2bac2bafd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbd122e4f2a05d78cdd6b2c9dcf019498d2b4bc2c6b107485ca19aa2bac2bafd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c"} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbd122e4f2a05d78cdd6b2c9dcf019498d2b4bc2c6b107485ca19aa2bac2bafd"} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c"} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c"} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c"} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c"} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c"} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c"} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c"} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c"} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c"} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c"} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c"} {"level":"debug","ts":"2026-07-06T22:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c"} {"level":"debug","ts":"2026-07-06T22:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c"} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030"} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030"} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030"} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030"} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256"} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030"} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256"} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030"} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030"} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256"} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e79c17e3be29080b5df87a446532f43b246c928bb69e469c79463c35cf72c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e79c17e3be29080b5df87a446532f43b246c928bb69e469c79463c35cf72c0"} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e79c17e3be29080b5df87a446532f43b246c928bb69e469c79463c35cf72c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030"} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e79c17e3be29080b5df87a446532f43b246c928bb69e469c79463c35cf72c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e79c17e3be29080b5df87a446532f43b246c928bb69e469c79463c35cf72c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e79c17e3be29080b5df87a446532f43b246c928bb69e469c79463c35cf72c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256"} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da351809bc5e86d13ce8d32d11c772cf596acaa82c081e37d2e6f412ef80cd79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e79c17e3be29080b5df87a446532f43b246c928bb69e469c79463c35cf72c0"} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da351809bc5e86d13ce8d32d11c772cf596acaa82c081e37d2e6f412ef80cd79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e79c17e3be29080b5df87a446532f43b246c928bb69e469c79463c35cf72c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da351809bc5e86d13ce8d32d11c772cf596acaa82c081e37d2e6f412ef80cd79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da351809bc5e86d13ce8d32d11c772cf596acaa82c081e37d2e6f412ef80cd79"} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da351809bc5e86d13ce8d32d11c772cf596acaa82c081e37d2e6f412ef80cd79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da351809bc5e86d13ce8d32d11c772cf596acaa82c081e37d2e6f412ef80cd79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da351809bc5e86d13ce8d32d11c772cf596acaa82c081e37d2e6f412ef80cd79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"da351809bc5e86d13ce8d32d11c772cf596acaa82c081e37d2e6f412ef80cd79","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"da351809bc5e86d13ce8d32d11c772cf596acaa82c081e37d2e6f412ef80cd79\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da351809bc5e86d13ce8d32d11c772cf596acaa82c081e37d2e6f412ef80cd79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da351809bc5e86d13ce8d32d11c772cf596acaa82c081e37d2e6f412ef80cd79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256"} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da351809bc5e86d13ce8d32d11c772cf596acaa82c081e37d2e6f412ef80cd79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da351809bc5e86d13ce8d32d11c772cf596acaa82c081e37d2e6f412ef80cd79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da351809bc5e86d13ce8d32d11c772cf596acaa82c081e37d2e6f412ef80cd79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"da351809bc5e86d13ce8d32d11c772cf596acaa82c081e37d2e6f412ef80cd79","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"da351809bc5e86d13ce8d32d11c772cf596acaa82c081e37d2e6f412ef80cd79\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da351809bc5e86d13ce8d32d11c772cf596acaa82c081e37d2e6f412ef80cd79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da351809bc5e86d13ce8d32d11c772cf596acaa82c081e37d2e6f412ef80cd79","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030"} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9867560886b6555159d65e057e6f98a9aac8131418f6bced76595ea563f1abfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da351809bc5e86d13ce8d32d11c772cf596acaa82c081e37d2e6f412ef80cd79"} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9867560886b6555159d65e057e6f98a9aac8131418f6bced76595ea563f1abfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9867560886b6555159d65e057e6f98a9aac8131418f6bced76595ea563f1abfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9867560886b6555159d65e057e6f98a9aac8131418f6bced76595ea563f1abfc"} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9867560886b6555159d65e057e6f98a9aac8131418f6bced76595ea563f1abfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9867560886b6555159d65e057e6f98a9aac8131418f6bced76595ea563f1abfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9867560886b6555159d65e057e6f98a9aac8131418f6bced76595ea563f1abfc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9867560886b6555159d65e057e6f98a9aac8131418f6bced76595ea563f1abfc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9867560886b6555159d65e057e6f98a9aac8131418f6bced76595ea563f1abfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9867560886b6555159d65e057e6f98a9aac8131418f6bced76595ea563f1abfc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9867560886b6555159d65e057e6f98a9aac8131418f6bced76595ea563f1abfc"} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9867560886b6555159d65e057e6f98a9aac8131418f6bced76595ea563f1abfc"} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9867560886b6555159d65e057e6f98a9aac8131418f6bced76595ea563f1abfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9867560886b6555159d65e057e6f98a9aac8131418f6bced76595ea563f1abfc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9867560886b6555159d65e057e6f98a9aac8131418f6bced76595ea563f1abfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3c8101e729c2784cceb351e7fb6d7335c3b828fe920a513a8565e5acfc6ca0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3c8101e729c2784cceb351e7fb6d7335c3b828fe920a513a8565e5acfc6ca0e"} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3c8101e729c2784cceb351e7fb6d7335c3b828fe920a513a8565e5acfc6ca0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9867560886b6555159d65e057e6f98a9aac8131418f6bced76595ea563f1abfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9867560886b6555159d65e057e6f98a9aac8131418f6bced76595ea563f1abfc"} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9867560886b6555159d65e057e6f98a9aac8131418f6bced76595ea563f1abfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa9ce7e7ccb64e874b14a4317552d5203f2ff4c8aa198caca94cd01ca31fd997","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa9ce7e7ccb64e874b14a4317552d5203f2ff4c8aa198caca94cd01ca31fd997"} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa9ce7e7ccb64e874b14a4317552d5203f2ff4c8aa198caca94cd01ca31fd997","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3c8101e729c2784cceb351e7fb6d7335c3b828fe920a513a8565e5acfc6ca0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04894ed4d09e3e9453ba905ff7c61e740fe6df99773103d0a3adba2cef237c24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04894ed4d09e3e9453ba905ff7c61e740fe6df99773103d0a3adba2cef237c24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9867560886b6555159d65e057e6f98a9aac8131418f6bced76595ea563f1abfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9867560886b6555159d65e057e6f98a9aac8131418f6bced76595ea563f1abfc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3c8101e729c2784cceb351e7fb6d7335c3b828fe920a513a8565e5acfc6ca0e"} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9867560886b6555159d65e057e6f98a9aac8131418f6bced76595ea563f1abfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa9ce7e7ccb64e874b14a4317552d5203f2ff4c8aa198caca94cd01ca31fd997","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa9ce7e7ccb64e874b14a4317552d5203f2ff4c8aa198caca94cd01ca31fd997"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04894ed4d09e3e9453ba905ff7c61e740fe6df99773103d0a3adba2cef237c24"} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa9ce7e7ccb64e874b14a4317552d5203f2ff4c8aa198caca94cd01ca31fd997","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3c8101e729c2784cceb351e7fb6d7335c3b828fe920a513a8565e5acfc6ca0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3c8101e729c2784cceb351e7fb6d7335c3b828fe920a513a8565e5acfc6ca0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3c8101e729c2784cceb351e7fb6d7335c3b828fe920a513a8565e5acfc6ca0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04894ed4d09e3e9453ba905ff7c61e740fe6df99773103d0a3adba2cef237c24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04894ed4d09e3e9453ba905ff7c61e740fe6df99773103d0a3adba2cef237c24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9867560886b6555159d65e057e6f98a9aac8131418f6bced76595ea563f1abfc"} {"level":"info","ts":"2026-07-06T22:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04894ed4d09e3e9453ba905ff7c61e740fe6df99773103d0a3adba2cef237c24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9867560886b6555159d65e057e6f98a9aac8131418f6bced76595ea563f1abfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa9ce7e7ccb64e874b14a4317552d5203f2ff4c8aa198caca94cd01ca31fd997","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa9ce7e7ccb64e874b14a4317552d5203f2ff4c8aa198caca94cd01ca31fd997"} {"level":"info","ts":"2026-07-06T22:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa9ce7e7ccb64e874b14a4317552d5203f2ff4c8aa198caca94cd01ca31fd997","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3c8101e729c2784cceb351e7fb6d7335c3b828fe920a513a8565e5acfc6ca0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3c8101e729c2784cceb351e7fb6d7335c3b828fe920a513a8565e5acfc6ca0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04894ed4d09e3e9453ba905ff7c61e740fe6df99773103d0a3adba2cef237c24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa9ce7e7ccb64e874b14a4317552d5203f2ff4c8aa198caca94cd01ca31fd997","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa9ce7e7ccb64e874b14a4317552d5203f2ff4c8aa198caca94cd01ca31fd997"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3c8101e729c2784cceb351e7fb6d7335c3b828fe920a513a8565e5acfc6ca0e"} {"level":"info","ts":"2026-07-06T22:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa9ce7e7ccb64e874b14a4317552d5203f2ff4c8aa198caca94cd01ca31fd997","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3c8101e729c2784cceb351e7fb6d7335c3b828fe920a513a8565e5acfc6ca0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3c8101e729c2784cceb351e7fb6d7335c3b828fe920a513a8565e5acfc6ca0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3c8101e729c2784cceb351e7fb6d7335c3b828fe920a513a8565e5acfc6ca0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa9ce7e7ccb64e874b14a4317552d5203f2ff4c8aa198caca94cd01ca31fd997","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3c8101e729c2784cceb351e7fb6d7335c3b828fe920a513a8565e5acfc6ca0e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04894ed4d09e3e9453ba905ff7c61e740fe6df99773103d0a3adba2cef237c24"} {"level":"info","ts":"2026-07-06T22:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa9ce7e7ccb64e874b14a4317552d5203f2ff4c8aa198caca94cd01ca31fd997"} {"level":"info","ts":"2026-07-06T22:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3c8101e729c2784cceb351e7fb6d7335c3b828fe920a513a8565e5acfc6ca0e"} {"level":"debug","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f"} {"level":"debug","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f"} {"level":"debug","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38e0c191f7161ac70486acf3cff1e6cb09ed0a9fe4496f99461792da4cfbcde9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f"} {"level":"debug","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38e0c191f7161ac70486acf3cff1e6cb09ed0a9fe4496f99461792da4cfbcde9"} {"level":"info","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f"} {"level":"info","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f"} {"level":"debug","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f"} {"level":"debug","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da351809bc5e86d13ce8d32d11c772cf596acaa82c081e37d2e6f412ef80cd79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da351809bc5e86d13ce8d32d11c772cf596acaa82c081e37d2e6f412ef80cd79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da351809bc5e86d13ce8d32d11c772cf596acaa82c081e37d2e6f412ef80cd79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da351809bc5e86d13ce8d32d11c772cf596acaa82c081e37d2e6f412ef80cd79","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da351809bc5e86d13ce8d32d11c772cf596acaa82c081e37d2e6f412ef80cd79"} {"level":"debug","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da351809bc5e86d13ce8d32d11c772cf596acaa82c081e37d2e6f412ef80cd79","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da351809bc5e86d13ce8d32d11c772cf596acaa82c081e37d2e6f412ef80cd79"} {"level":"debug","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da351809bc5e86d13ce8d32d11c772cf596acaa82c081e37d2e6f412ef80cd79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da351809bc5e86d13ce8d32d11c772cf596acaa82c081e37d2e6f412ef80cd79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da351809bc5e86d13ce8d32d11c772cf596acaa82c081e37d2e6f412ef80cd79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da351809bc5e86d13ce8d32d11c772cf596acaa82c081e37d2e6f412ef80cd79","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f"} {"level":"info","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c"} {"level":"info","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da351809bc5e86d13ce8d32d11c772cf596acaa82c081e37d2e6f412ef80cd79"} {"level":"debug","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256"} {"level":"debug","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256"} {"level":"debug","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256"} {"level":"debug","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256"} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256"} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030"} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256"} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256"} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256"} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256"} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f9f19a2192a85695d2320c31db10af4b4d3ea5249115ccddb16717bf3330b76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f9f19a2192a85695d2320c31db10af4b4d3ea5249115ccddb16717bf3330b76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f9f19a2192a85695d2320c31db10af4b4d3ea5249115ccddb16717bf3330b76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f9f19a2192a85695d2320c31db10af4b4d3ea5249115ccddb16717bf3330b76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f9f19a2192a85695d2320c31db10af4b4d3ea5249115ccddb16717bf3330b76"} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f9f19a2192a85695d2320c31db10af4b4d3ea5249115ccddb16717bf3330b76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f9f19a2192a85695d2320c31db10af4b4d3ea5249115ccddb16717bf3330b76"} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f9f19a2192a85695d2320c31db10af4b4d3ea5249115ccddb16717bf3330b76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f9f19a2192a85695d2320c31db10af4b4d3ea5249115ccddb16717bf3330b76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f9f19a2192a85695d2320c31db10af4b4d3ea5249115ccddb16717bf3330b76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f9f19a2192a85695d2320c31db10af4b4d3ea5249115ccddb16717bf3330b76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f9f19a2192a85695d2320c31db10af4b4d3ea5249115ccddb16717bf3330b76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6596c7d4b4de6b0ce9201452e74fb23101d532e60756bb491b4cade676bab2d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f9f19a2192a85695d2320c31db10af4b4d3ea5249115ccddb16717bf3330b76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f9f19a2192a85695d2320c31db10af4b4d3ea5249115ccddb16717bf3330b76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e79c17e3be29080b5df87a446532f43b246c928bb69e469c79463c35cf72c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f9f19a2192a85695d2320c31db10af4b4d3ea5249115ccddb16717bf3330b76"} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f9f19a2192a85695d2320c31db10af4b4d3ea5249115ccddb16717bf3330b76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f9f19a2192a85695d2320c31db10af4b4d3ea5249115ccddb16717bf3330b76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6596c7d4b4de6b0ce9201452e74fb23101d532e60756bb491b4cade676bab2d9"} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f9f19a2192a85695d2320c31db10af4b4d3ea5249115ccddb16717bf3330b76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f9f19a2192a85695d2320c31db10af4b4d3ea5249115ccddb16717bf3330b76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e79c17e3be29080b5df87a446532f43b246c928bb69e469c79463c35cf72c0"} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f9f19a2192a85695d2320c31db10af4b4d3ea5249115ccddb16717bf3330b76"} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39eb6de22fe7f67d74c9a5958c46d977958b4693544f1802f559d1a96ba7fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24"} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eed53d81e72daa16ed974b723463c1d0aae1b830181c9786e4f72598efa0cb42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39eb6de22fe7f67d74c9a5958c46d977958b4693544f1802f559d1a96ba7fac"} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9867560886b6555159d65e057e6f98a9aac8131418f6bced76595ea563f1abfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:46:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:46:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbd122e4f2a05d78cdd6b2c9dcf019498d2b4bc2c6b107485ca19aa2bac2bafd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24"} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eed53d81e72daa16ed974b723463c1d0aae1b830181c9786e4f72598efa0cb42"} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04894ed4d09e3e9453ba905ff7c61e740fe6df99773103d0a3adba2cef237c24","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9867560886b6555159d65e057e6f98a9aac8131418f6bced76595ea563f1abfc"} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9df7c7021642a8872d74215b3b8f40707a4b5e20d2b23b3bfd906d02f522963","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbd122e4f2a05d78cdd6b2c9dcf019498d2b4bc2c6b107485ca19aa2bac2bafd"} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa9ce7e7ccb64e874b14a4317552d5203f2ff4c8aa198caca94cd01ca31fd997","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24"} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3c8101e729c2784cceb351e7fb6d7335c3b828fe920a513a8565e5acfc6ca0e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a"} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04894ed4d09e3e9453ba905ff7c61e740fe6df99773103d0a3adba2cef237c24"} {"level":"debug","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d154abbb9a8b96bb5c6e5e7241cade7cef39b6a6c696bf3e34e3dbb5833fa8f4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9df7c7021642a8872d74215b3b8f40707a4b5e20d2b23b3bfd906d02f522963"} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa9ce7e7ccb64e874b14a4317552d5203f2ff4c8aa198caca94cd01ca31fd997"} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3c8101e729c2784cceb351e7fb6d7335c3b828fe920a513a8565e5acfc6ca0e"} {"level":"info","ts":"2026-07-06T22:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d154abbb9a8b96bb5c6e5e7241cade7cef39b6a6c696bf3e34e3dbb5833fa8f4"} {"level":"info","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a41a974f-c93f-4cbb-a7a7-939eca52bdec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55940","PortSpecifier":{"PortValue":55940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a41a974f-c93f-4cbb-a7a7-939eca52bdec","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a41a974f-c93f-4cbb-a7a7-939eca52bdec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55940","PortSpecifier":{"PortValue":55940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378022,"nanos":303885698},"http":{"id":"a41a974f-c93f-4cbb-a7a7-939eca52bdec","method":"POST","headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a41a974f-c93f-4cbb-a7a7-939eca52bdec","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a41a974f-c93f-4cbb-a7a7-939eca52bdec","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"011dc850-13ad-4879-b525-4b025a565c36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"]}} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a41a974f-c93f-4cbb-a7a7-939eca52bdec","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"011dc850-13ad-4879-b525-4b025a565c36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d154abbb9a8b96bb5c6e5e7241cade7cef39b6a6c696bf3e34e3dbb5833fa8f4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a41a974f-c93f-4cbb-a7a7-939eca52bdec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a41a974f-c93f-4cbb-a7a7-939eca52bdec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a41a974f-c93f-4cbb-a7a7-939eca52bdec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-65387d/sub-test-model-65387d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a41a974f-c93f-4cbb-a7a7-939eca52bdec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a41a974f-c93f-4cbb-a7a7-939eca52bdec","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a41a974f-c93f-4cbb-a7a7-939eca52bdec","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a41a974f-c93f-4cbb-a7a7-939eca52bdec","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a41a974f-c93f-4cbb-a7a7-939eca52bdec","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"381b0f1a-2bc9-4f1d-8d9f-534457d98f85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52832","PortSpecifier":{"PortValue":52832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"381b0f1a-2bc9-4f1d-8d9f-534457d98f85","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"381b0f1a-2bc9-4f1d-8d9f-534457d98f85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52832","PortSpecifier":{"PortValue":52832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378022,"nanos":356968971},"http":{"id":"381b0f1a-2bc9-4f1d-8d9f-534457d98f85","method":"POST","headers":{":authority":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"381b0f1a-2bc9-4f1d-8d9f-534457d98f85","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"381b0f1a-2bc9-4f1d-8d9f-534457d98f85","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"011dc850-13ad-4879-b525-4b025a565c36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"]}} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"381b0f1a-2bc9-4f1d-8d9f-534457d98f85","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"011dc850-13ad-4879-b525-4b025a565c36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"381b0f1a-2bc9-4f1d-8d9f-534457d98f85","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"381b0f1a-2bc9-4f1d-8d9f-534457d98f85","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"381b0f1a-2bc9-4f1d-8d9f-534457d98f85","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-944f9f/sub-test-model-944f9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"381b0f1a-2bc9-4f1d-8d9f-534457d98f85","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"381b0f1a-2bc9-4f1d-8d9f-534457d98f85","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"381b0f1a-2bc9-4f1d-8d9f-534457d98f85","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"381b0f1a-2bc9-4f1d-8d9f-534457d98f85","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"381b0f1a-2bc9-4f1d-8d9f-534457d98f85","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f41b27d-fb03-4a72-a34c-661a0f8a97c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55944","PortSpecifier":{"PortValue":55944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9f41b27d-fb03-4a72-a34c-661a0f8a97c7","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f41b27d-fb03-4a72-a34c-661a0f8a97c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55944","PortSpecifier":{"PortValue":55944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378022,"nanos":401528295},"http":{"id":"9f41b27d-fb03-4a72-a34c-661a0f8a97c7","method":"GET","headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9f41b27d-fb03-4a72-a34c-661a0f8a97c7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15muOcBXJMBbuJuXb_ZpNEPSgNc2tR3kc4hgDLkUV31OgINDLwVAdm9TNXgr3"} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9f41b27d-fb03-4a72-a34c-661a0f8a97c7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-65387d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15muOcBXJMBbuJuXb_ZpNEPSgNc2tR3kc4hgDLkUV31OgINDLwVAdm9TNXgr3\"}"} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9f41b27d-fb03-4a72-a34c-661a0f8a97c7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-65387d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6703b511-27fc-4ef0-9ed7-52d07739b433","keyName":"e2e-sub-iso-02d991","subscription":"e2e-a-only-fd54ea","tenant":"e2e-shared-a-65387d","userId":"6703b511-27fc-4ef0-9ed7-52d07739b433","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9f41b27d-fb03-4a72-a34c-661a0f8a97c7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f41b27d-fb03-4a72-a34c-661a0f8a97c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f41b27d-fb03-4a72-a34c-661a0f8a97c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f41b27d-fb03-4a72-a34c-661a0f8a97c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-65387d/sub-test-model-65387d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f41b27d-fb03-4a72-a34c-661a0f8a97c7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f41b27d-fb03-4a72-a34c-661a0f8a97c7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f41b27d-fb03-4a72-a34c-661a0f8a97c7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-fd54ea"} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9f41b27d-fb03-4a72-a34c-661a0f8a97c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f41b27d-fb03-4a72-a34c-661a0f8a97c7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f41b27d-fb03-4a72-a34c-661a0f8a97c7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d8a1136-553f-4f9e-a81e-edbe1fa4ea06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52840","PortSpecifier":{"PortValue":52840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d8a1136-553f-4f9e-a81e-edbe1fa4ea06","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d8a1136-553f-4f9e-a81e-edbe1fa4ea06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52840","PortSpecifier":{"PortValue":52840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378022,"nanos":444403315},"http":{"id":"2d8a1136-553f-4f9e-a81e-edbe1fa4ea06","method":"GET","headers":{":authority":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d8a1136-553f-4f9e-a81e-edbe1fa4ea06","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-dlFfpnsufQcVAT7k_mGSbWgEUrUcrON16owEvxGzv29aGypKQCOPfXTNVWIi"} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2d8a1136-553f-4f9e-a81e-edbe1fa4ea06","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-944f9f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-dlFfpnsufQcVAT7k_mGSbWgEUrUcrON16owEvxGzv29aGypKQCOPfXTNVWIi\"}"} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2d8a1136-553f-4f9e-a81e-edbe1fa4ea06","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-944f9f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"01aec8f5-9d13-47e9-b6dd-ee82c2b18247","keyName":"e2e-sub-iso-acb824","subscription":"e2e-b-only-fd54ea","tenant":"e2e-shared-b-944f9f","userId":"01aec8f5-9d13-47e9-b6dd-ee82c2b18247","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d8a1136-553f-4f9e-a81e-edbe1fa4ea06","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d8a1136-553f-4f9e-a81e-edbe1fa4ea06","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d8a1136-553f-4f9e-a81e-edbe1fa4ea06","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d8a1136-553f-4f9e-a81e-edbe1fa4ea06","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-944f9f/sub-test-model-944f9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d8a1136-553f-4f9e-a81e-edbe1fa4ea06","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2d8a1136-553f-4f9e-a81e-edbe1fa4ea06","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d8a1136-553f-4f9e-a81e-edbe1fa4ea06","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-fd54ea"} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d8a1136-553f-4f9e-a81e-edbe1fa4ea06","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d8a1136-553f-4f9e-a81e-edbe1fa4ea06","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:47:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d8a1136-553f-4f9e-a81e-edbe1fa4ea06","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7ed3d21-f711-42db-85c9-bec5a981d8a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52544","PortSpecifier":{"PortValue":52544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b7ed3d21-f711-42db-85c9-bec5a981d8a1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7ed3d21-f711-42db-85c9-bec5a981d8a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52544","PortSpecifier":{"PortValue":52544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378038,"nanos":826326555},"http":{"id":"b7ed3d21-f711-42db-85c9-bec5a981d8a1","method":"POST","headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b7ed3d21-f711-42db-85c9-bec5a981d8a1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b7ed3d21-f711-42db-85c9-bec5a981d8a1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"011dc850-13ad-4879-b525-4b025a565c36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"]}} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b7ed3d21-f711-42db-85c9-bec5a981d8a1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"011dc850-13ad-4879-b525-4b025a565c36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d154abbb9a8b96bb5c6e5e7241cade7cef39b6a6c696bf3e34e3dbb5833fa8f4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7ed3d21-f711-42db-85c9-bec5a981d8a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7ed3d21-f711-42db-85c9-bec5a981d8a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7ed3d21-f711-42db-85c9-bec5a981d8a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-65387d/sub-test-model-65387d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b7ed3d21-f711-42db-85c9-bec5a981d8a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7ed3d21-f711-42db-85c9-bec5a981d8a1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7ed3d21-f711-42db-85c9-bec5a981d8a1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7ed3d21-f711-42db-85c9-bec5a981d8a1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7ed3d21-f711-42db-85c9-bec5a981d8a1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c3ac49c-f963-4c87-9c5e-f8e91aadd58f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35258","PortSpecifier":{"PortValue":35258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6c3ac49c-f963-4c87-9c5e-f8e91aadd58f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c3ac49c-f963-4c87-9c5e-f8e91aadd58f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35258","PortSpecifier":{"PortValue":35258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378038,"nanos":858835148},"http":{"id":"6c3ac49c-f963-4c87-9c5e-f8e91aadd58f","method":"POST","headers":{":authority":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6c3ac49c-f963-4c87-9c5e-f8e91aadd58f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6c3ac49c-f963-4c87-9c5e-f8e91aadd58f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"011dc850-13ad-4879-b525-4b025a565c36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"]}} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6c3ac49c-f963-4c87-9c5e-f8e91aadd58f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"011dc850-13ad-4879-b525-4b025a565c36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c3ac49c-f963-4c87-9c5e-f8e91aadd58f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c3ac49c-f963-4c87-9c5e-f8e91aadd58f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c3ac49c-f963-4c87-9c5e-f8e91aadd58f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-944f9f/sub-test-model-944f9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6c3ac49c-f963-4c87-9c5e-f8e91aadd58f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c3ac49c-f963-4c87-9c5e-f8e91aadd58f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c3ac49c-f963-4c87-9c5e-f8e91aadd58f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c3ac49c-f963-4c87-9c5e-f8e91aadd58f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c3ac49c-f963-4c87-9c5e-f8e91aadd58f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c8a78de-65b5-47dd-bb2c-b132221dab33","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52546","PortSpecifier":{"PortValue":52546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9c8a78de-65b5-47dd-bb2c-b132221dab33","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c8a78de-65b5-47dd-bb2c-b132221dab33","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52546","PortSpecifier":{"PortValue":52546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378038,"nanos":893549364},"http":{"id":"9c8a78de-65b5-47dd-bb2c-b132221dab33","method":"POST","headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9c8a78de-65b5-47dd-bb2c-b132221dab33","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EdPExvxdZpj9Au6T_ILjDvZVViIm5EMWpbL70u256fB6WNdNL6AkkcRcVjmz"} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9c8a78de-65b5-47dd-bb2c-b132221dab33","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-65387d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EdPExvxdZpj9Au6T_ILjDvZVViIm5EMWpbL70u256fB6WNdNL6AkkcRcVjmz\"}"} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9c8a78de-65b5-47dd-bb2c-b132221dab33","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-65387d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dcf7cafb-b2d8-4824-b769-ec20c3303141","keyName":"e2e-sub-iso-edb767","subscription":"e2e-shared-sub-535229","tenant":"e2e-shared-a-65387d","userId":"dcf7cafb-b2d8-4824-b769-ec20c3303141","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9c8a78de-65b5-47dd-bb2c-b132221dab33","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c8a78de-65b5-47dd-bb2c-b132221dab33","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c8a78de-65b5-47dd-bb2c-b132221dab33","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c8a78de-65b5-47dd-bb2c-b132221dab33","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-65387d/sub-test-model-65387d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c8a78de-65b5-47dd-bb2c-b132221dab33","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-535229"} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c8a78de-65b5-47dd-bb2c-b132221dab33","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9c8a78de-65b5-47dd-bb2c-b132221dab33","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c8a78de-65b5-47dd-bb2c-b132221dab33","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c8a78de-65b5-47dd-bb2c-b132221dab33","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c8a78de-65b5-47dd-bb2c-b132221dab33","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d871972-de71-4907-98c5-446d6c6f2f99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35272","PortSpecifier":{"PortValue":35272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1d871972-de71-4907-98c5-446d6c6f2f99","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d871972-de71-4907-98c5-446d6c6f2f99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35272","PortSpecifier":{"PortValue":35272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378038,"nanos":920844220},"http":{"id":"1d871972-de71-4907-98c5-446d6c6f2f99","method":"POST","headers":{":authority":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1d871972-de71-4907-98c5-446d6c6f2f99","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-191wPLcXz9fqi9DiW_v0UPNeDEbXS2X083uvCXDd1Izp5xVzurU6S05xQxdIy"} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1d871972-de71-4907-98c5-446d6c6f2f99","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-944f9f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-191wPLcXz9fqi9DiW_v0UPNeDEbXS2X083uvCXDd1Izp5xVzurU6S05xQxdIy\"}"} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1d871972-de71-4907-98c5-446d6c6f2f99","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-944f9f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"57f286f4-4936-47db-92b7-6fed595b19ec","keyName":"e2e-sub-iso-c89348","subscription":"e2e-shared-sub-535229","tenant":"e2e-shared-b-944f9f","userId":"57f286f4-4936-47db-92b7-6fed595b19ec","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1d871972-de71-4907-98c5-446d6c6f2f99","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d871972-de71-4907-98c5-446d6c6f2f99","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d871972-de71-4907-98c5-446d6c6f2f99","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d871972-de71-4907-98c5-446d6c6f2f99","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-944f9f/sub-test-model-944f9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d871972-de71-4907-98c5-446d6c6f2f99","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-535229"} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d871972-de71-4907-98c5-446d6c6f2f99","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d871972-de71-4907-98c5-446d6c6f2f99","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1d871972-de71-4907-98c5-446d6c6f2f99","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d871972-de71-4907-98c5-446d6c6f2f99","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:47:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d871972-de71-4907-98c5-446d6c6f2f99","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:47:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dbd122e4f2a05d78cdd6b2c9dcf019498d2b4bc2c6b107485ca19aa2bac2bafd"} {"level":"info","ts":"2026-07-06T22:47:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38e0c191f7161ac70486acf3cff1e6cb09ed0a9fe4496f99461792da4cfbcde9"} {"level":"info","ts":"2026-07-06T22:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eed53d81e72daa16ed974b723463c1d0aae1b830181c9786e4f72598efa0cb42"} {"level":"info","ts":"2026-07-06T22:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9df7c7021642a8872d74215b3b8f40707a4b5e20d2b23b3bfd906d02f522963"} {"level":"info","ts":"2026-07-06T22:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6596c7d4b4de6b0ce9201452e74fb23101d532e60756bb491b4cade676bab2d9"} {"level":"info","ts":"2026-07-06T22:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81fd3665e12f5aef1dc768aa9e34c16410fd685b990297bffc8946e58f3fa65c"} {"level":"info","ts":"2026-07-06T22:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f9f19a2192a85695d2320c31db10af4b4d3ea5249115ccddb16717bf3330b76"} {"level":"info","ts":"2026-07-06T22:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a39eb6de22fe7f67d74c9a5958c46d977958b4693544f1802f559d1a96ba7fac"} {"level":"debug","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395"} {"level":"debug","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395"} {"level":"debug","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28aa89d9e8a973cdb6ee94b94951fa5d1402b62e5c2a8ec38be8cfebdfc49f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28aa89d9e8a973cdb6ee94b94951fa5d1402b62e5c2a8ec38be8cfebdfc49f87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28aa89d9e8a973cdb6ee94b94951fa5d1402b62e5c2a8ec38be8cfebdfc49f87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28aa89d9e8a973cdb6ee94b94951fa5d1402b62e5c2a8ec38be8cfebdfc49f87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395"} {"level":"debug","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28aa89d9e8a973cdb6ee94b94951fa5d1402b62e5c2a8ec38be8cfebdfc49f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28aa89d9e8a973cdb6ee94b94951fa5d1402b62e5c2a8ec38be8cfebdfc49f87"} {"level":"info","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28aa89d9e8a973cdb6ee94b94951fa5d1402b62e5c2a8ec38be8cfebdfc49f87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28aa89d9e8a973cdb6ee94b94951fa5d1402b62e5c2a8ec38be8cfebdfc49f87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28aa89d9e8a973cdb6ee94b94951fa5d1402b62e5c2a8ec38be8cfebdfc49f87"} {"level":"debug","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28aa89d9e8a973cdb6ee94b94951fa5d1402b62e5c2a8ec38be8cfebdfc49f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28aa89d9e8a973cdb6ee94b94951fa5d1402b62e5c2a8ec38be8cfebdfc49f87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28aa89d9e8a973cdb6ee94b94951fa5d1402b62e5c2a8ec38be8cfebdfc49f87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3cd278f8ad877f6e35c388f6e5ca44ea14ef5b351668b613c238e95acc0d503","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3cd278f8ad877f6e35c388f6e5ca44ea14ef5b351668b613c238e95acc0d503"} {"level":"info","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3cd278f8ad877f6e35c388f6e5ca44ea14ef5b351668b613c238e95acc0d503","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28aa89d9e8a973cdb6ee94b94951fa5d1402b62e5c2a8ec38be8cfebdfc49f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28aa89d9e8a973cdb6ee94b94951fa5d1402b62e5c2a8ec38be8cfebdfc49f87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca277187a9052ca5c0897b534ea7906f4953c1fe9778c7f21e3011bab6e7f583","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca277187a9052ca5c0897b534ea7906f4953c1fe9778c7f21e3011bab6e7f583","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3cd278f8ad877f6e35c388f6e5ca44ea14ef5b351668b613c238e95acc0d503","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3cd278f8ad877f6e35c388f6e5ca44ea14ef5b351668b613c238e95acc0d503"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28aa89d9e8a973cdb6ee94b94951fa5d1402b62e5c2a8ec38be8cfebdfc49f87"} {"level":"info","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3cd278f8ad877f6e35c388f6e5ca44ea14ef5b351668b613c238e95acc0d503","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28aa89d9e8a973cdb6ee94b94951fa5d1402b62e5c2a8ec38be8cfebdfc49f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28aa89d9e8a973cdb6ee94b94951fa5d1402b62e5c2a8ec38be8cfebdfc49f87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28aa89d9e8a973cdb6ee94b94951fa5d1402b62e5c2a8ec38be8cfebdfc49f87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca277187a9052ca5c0897b534ea7906f4953c1fe9778c7f21e3011bab6e7f583","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca277187a9052ca5c0897b534ea7906f4953c1fe9778c7f21e3011bab6e7f583","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3cd278f8ad877f6e35c388f6e5ca44ea14ef5b351668b613c238e95acc0d503","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28aa89d9e8a973cdb6ee94b94951fa5d1402b62e5c2a8ec38be8cfebdfc49f87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca277187a9052ca5c0897b534ea7906f4953c1fe9778c7f21e3011bab6e7f583"} {"level":"info","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca277187a9052ca5c0897b534ea7906f4953c1fe9778c7f21e3011bab6e7f583","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca277187a9052ca5c0897b534ea7906f4953c1fe9778c7f21e3011bab6e7f583"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca277187a9052ca5c0897b534ea7906f4953c1fe9778c7f21e3011bab6e7f583","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe24976d35f890e84f172c0b5c559014127a67f3690d3205a87d2a8540358e37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3cd278f8ad877f6e35c388f6e5ca44ea14ef5b351668b613c238e95acc0d503"} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe24976d35f890e84f172c0b5c559014127a67f3690d3205a87d2a8540358e37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca277187a9052ca5c0897b534ea7906f4953c1fe9778c7f21e3011bab6e7f583","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe24976d35f890e84f172c0b5c559014127a67f3690d3205a87d2a8540358e37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe24976d35f890e84f172c0b5c559014127a67f3690d3205a87d2a8540358e37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28aa89d9e8a973cdb6ee94b94951fa5d1402b62e5c2a8ec38be8cfebdfc49f87"} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe24976d35f890e84f172c0b5c559014127a67f3690d3205a87d2a8540358e37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d"} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca277187a9052ca5c0897b534ea7906f4953c1fe9778c7f21e3011bab6e7f583"} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe24976d35f890e84f172c0b5c559014127a67f3690d3205a87d2a8540358e37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe24976d35f890e84f172c0b5c559014127a67f3690d3205a87d2a8540358e37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe24976d35f890e84f172c0b5c559014127a67f3690d3205a87d2a8540358e37","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe24976d35f890e84f172c0b5c559014127a67f3690d3205a87d2a8540358e37"} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d"} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe24976d35f890e84f172c0b5c559014127a67f3690d3205a87d2a8540358e37"} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d"} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828"} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe24976d35f890e84f172c0b5c559014127a67f3690d3205a87d2a8540358e37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe24976d35f890e84f172c0b5c559014127a67f3690d3205a87d2a8540358e37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe24976d35f890e84f172c0b5c559014127a67f3690d3205a87d2a8540358e37","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828"} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe24976d35f890e84f172c0b5c559014127a67f3690d3205a87d2a8540358e37"} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe24976d35f890e84f172c0b5c559014127a67f3690d3205a87d2a8540358e37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828"} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28019459a5995f333d69b1418cea65557adbcfcb4123fd7760e750590a141446","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828"} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28019459a5995f333d69b1418cea65557adbcfcb4123fd7760e750590a141446"} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28019459a5995f333d69b1418cea65557adbcfcb4123fd7760e750590a141446","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28019459a5995f333d69b1418cea65557adbcfcb4123fd7760e750590a141446"} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28019459a5995f333d69b1418cea65557adbcfcb4123fd7760e750590a141446","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28019459a5995f333d69b1418cea65557adbcfcb4123fd7760e750590a141446"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37bcaae8c3e30de8821dba59ef0ff1dc4aa1c1f72d0152e01540cb62202f0030"} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28019459a5995f333d69b1418cea65557adbcfcb4123fd7760e750590a141446","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828"} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01e79c17e3be29080b5df87a446532f43b246c928bb69e469c79463c35cf72c0"} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28019459a5995f333d69b1418cea65557adbcfcb4123fd7760e750590a141446"} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28019459a5995f333d69b1418cea65557adbcfcb4123fd7760e750590a141446","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828"} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa9ce7e7ccb64e874b14a4317552d5203f2ff4c8aa198caca94cd01ca31fd997"} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9867560886b6555159d65e057e6f98a9aac8131418f6bced76595ea563f1abfc"} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828"} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da351809bc5e86d13ce8d32d11c772cf596acaa82c081e37d2e6f412ef80cd79"} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1861c09e9be1c4bee3898dbf7be54dcf0eac5b262f295ff453c628c4f79f8256"} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828"} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3c8101e729c2784cceb351e7fb6d7335c3b828fe920a513a8565e5acfc6ca0e"} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04894ed4d09e3e9453ba905ff7c61e740fe6df99773103d0a3adba2cef237c24"} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828"} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828"} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828"} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828"} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828"} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828"} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828"} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828"} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828"} {"level":"info","ts":"2026-07-06T22:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828"} {"level":"debug","ts":"2026-07-06T22:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828"} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4896bf79e492d864a7af439c6ca97c3c4347e57b1ba3f216e3b9883fee258e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4896bf79e492d864a7af439c6ca97c3c4347e57b1ba3f216e3b9883fee258e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4896bf79e492d864a7af439c6ca97c3c4347e57b1ba3f216e3b9883fee258e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4896bf79e492d864a7af439c6ca97c3c4347e57b1ba3f216e3b9883fee258e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4896bf79e492d864a7af439c6ca97c3c4347e57b1ba3f216e3b9883fee258e5"} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4896bf79e492d864a7af439c6ca97c3c4347e57b1ba3f216e3b9883fee258e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4896bf79e492d864a7af439c6ca97c3c4347e57b1ba3f216e3b9883fee258e5"} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4896bf79e492d864a7af439c6ca97c3c4347e57b1ba3f216e3b9883fee258e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4896bf79e492d864a7af439c6ca97c3c4347e57b1ba3f216e3b9883fee258e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4896bf79e492d864a7af439c6ca97c3c4347e57b1ba3f216e3b9883fee258e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4896bf79e492d864a7af439c6ca97c3c4347e57b1ba3f216e3b9883fee258e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4896bf79e492d864a7af439c6ca97c3c4347e57b1ba3f216e3b9883fee258e5"} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6554c8d2f6689c3a0ea0ff908865302ae3371e4812b682df1b8d17d4f19b75a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6554c8d2f6689c3a0ea0ff908865302ae3371e4812b682df1b8d17d4f19b75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6554c8d2f6689c3a0ea0ff908865302ae3371e4812b682df1b8d17d4f19b75a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6554c8d2f6689c3a0ea0ff908865302ae3371e4812b682df1b8d17d4f19b75a"} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6554c8d2f6689c3a0ea0ff908865302ae3371e4812b682df1b8d17d4f19b75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6554c8d2f6689c3a0ea0ff908865302ae3371e4812b682df1b8d17d4f19b75a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c6554c8d2f6689c3a0ea0ff908865302ae3371e4812b682df1b8d17d4f19b75a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c6554c8d2f6689c3a0ea0ff908865302ae3371e4812b682df1b8d17d4f19b75a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6554c8d2f6689c3a0ea0ff908865302ae3371e4812b682df1b8d17d4f19b75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6554c8d2f6689c3a0ea0ff908865302ae3371e4812b682df1b8d17d4f19b75a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6554c8d2f6689c3a0ea0ff908865302ae3371e4812b682df1b8d17d4f19b75a"} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6554c8d2f6689c3a0ea0ff908865302ae3371e4812b682df1b8d17d4f19b75a"} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6554c8d2f6689c3a0ea0ff908865302ae3371e4812b682df1b8d17d4f19b75a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6554c8d2f6689c3a0ea0ff908865302ae3371e4812b682df1b8d17d4f19b75a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6554c8d2f6689c3a0ea0ff908865302ae3371e4812b682df1b8d17d4f19b75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6554c8d2f6689c3a0ea0ff908865302ae3371e4812b682df1b8d17d4f19b75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b"} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6554c8d2f6689c3a0ea0ff908865302ae3371e4812b682df1b8d17d4f19b75a"} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b"} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b"} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d"} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b"} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d"} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b"} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d"} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b"} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b"} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d"} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421"} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b"} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421"} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421"} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b6ed889ac74ae8aad12ba9ce8a32b8593f32df2ab0e927d14f951ca200dc5e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421"} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b6ed889ac74ae8aad12ba9ce8a32b8593f32df2ab0e927d14f951ca200dc5e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b6ed889ac74ae8aad12ba9ce8a32b8593f32df2ab0e927d14f951ca200dc5e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b6ed889ac74ae8aad12ba9ce8a32b8593f32df2ab0e927d14f951ca200dc5e0"} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b6ed889ac74ae8aad12ba9ce8a32b8593f32df2ab0e927d14f951ca200dc5e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06"} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b6ed889ac74ae8aad12ba9ce8a32b8593f32df2ab0e927d14f951ca200dc5e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b6ed889ac74ae8aad12ba9ce8a32b8593f32df2ab0e927d14f951ca200dc5e0"} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b6ed889ac74ae8aad12ba9ce8a32b8593f32df2ab0e927d14f951ca200dc5e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b6ed889ac74ae8aad12ba9ce8a32b8593f32df2ab0e927d14f951ca200dc5e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06"} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b6ed889ac74ae8aad12ba9ce8a32b8593f32df2ab0e927d14f951ca200dc5e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b6ed889ac74ae8aad12ba9ce8a32b8593f32df2ab0e927d14f951ca200dc5e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421"} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06"} {"level":"debug","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b6ed889ac74ae8aad12ba9ce8a32b8593f32df2ab0e927d14f951ca200dc5e0"} {"level":"info","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06"} {"level":"debug","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06"} {"level":"info","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce"} {"level":"info","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06"} {"level":"info","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce"} {"level":"debug","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06"} {"level":"info","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce"} {"level":"info","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce"} {"level":"debug","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce"} {"level":"debug","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce"} {"level":"debug","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce"} {"level":"debug","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce"} {"level":"debug","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce"} {"level":"debug","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:47:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:47:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce"} {"level":"debug","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce"} {"level":"debug","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:47:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:47:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce"} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a"} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a"} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421"} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a"} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421"} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421"} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421"} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421"} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421"} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421"} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421"} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d"} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d"} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421"} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d"} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421"} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d"} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421"} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d"} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d"} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:48:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421"} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d"} {"level":"debug","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28019459a5995f333d69b1418cea65557adbcfcb4123fd7760e750590a141446","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28019459a5995f333d69b1418cea65557adbcfcb4123fd7760e750590a141446"} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d"} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d"} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d"} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06"} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d"} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d"} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d"} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d"} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d"} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d"} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d"} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6554c8d2f6689c3a0ea0ff908865302ae3371e4812b682df1b8d17d4f19b75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6554c8d2f6689c3a0ea0ff908865302ae3371e4812b682df1b8d17d4f19b75a"} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d"} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d"} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d"} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3cd278f8ad877f6e35c388f6e5ca44ea14ef5b351668b613c238e95acc0d503","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d"} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3cd278f8ad877f6e35c388f6e5ca44ea14ef5b351668b613c238e95acc0d503"} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d"} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395"} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395"} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca277187a9052ca5c0897b534ea7906f4953c1fe9778c7f21e3011bab6e7f583","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395"} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca277187a9052ca5c0897b534ea7906f4953c1fe9778c7f21e3011bab6e7f583"} {"level":"info","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:48:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395"} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395"} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395"} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828"} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395"} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395"} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b6ed889ac74ae8aad12ba9ce8a32b8593f32df2ab0e927d14f951ca200dc5e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b6ed889ac74ae8aad12ba9ce8a32b8593f32df2ab0e927d14f951ca200dc5e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b6ed889ac74ae8aad12ba9ce8a32b8593f32df2ab0e927d14f951ca200dc5e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b6ed889ac74ae8aad12ba9ce8a32b8593f32df2ab0e927d14f951ca200dc5e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b6ed889ac74ae8aad12ba9ce8a32b8593f32df2ab0e927d14f951ca200dc5e0"} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b6ed889ac74ae8aad12ba9ce8a32b8593f32df2ab0e927d14f951ca200dc5e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b6ed889ac74ae8aad12ba9ce8a32b8593f32df2ab0e927d14f951ca200dc5e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395"} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b6ed889ac74ae8aad12ba9ce8a32b8593f32df2ab0e927d14f951ca200dc5e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b6ed889ac74ae8aad12ba9ce8a32b8593f32df2ab0e927d14f951ca200dc5e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b6ed889ac74ae8aad12ba9ce8a32b8593f32df2ab0e927d14f951ca200dc5e0"} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b6ed889ac74ae8aad12ba9ce8a32b8593f32df2ab0e927d14f951ca200dc5e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b6ed889ac74ae8aad12ba9ce8a32b8593f32df2ab0e927d14f951ca200dc5e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b6ed889ac74ae8aad12ba9ce8a32b8593f32df2ab0e927d14f951ca200dc5e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b6ed889ac74ae8aad12ba9ce8a32b8593f32df2ab0e927d14f951ca200dc5e0"} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b6ed889ac74ae8aad12ba9ce8a32b8593f32df2ab0e927d14f951ca200dc5e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b6ed889ac74ae8aad12ba9ce8a32b8593f32df2ab0e927d14f951ca200dc5e0"} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d154abbb9a8b96bb5c6e5e7241cade7cef39b6a6c696bf3e34e3dbb5833fa8f4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24"} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b6ed889ac74ae8aad12ba9ce8a32b8593f32df2ab0e927d14f951ca200dc5e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b6ed889ac74ae8aad12ba9ce8a32b8593f32df2ab0e927d14f951ca200dc5e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b6ed889ac74ae8aad12ba9ce8a32b8593f32df2ab0e927d14f951ca200dc5e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b6ed889ac74ae8aad12ba9ce8a32b8593f32df2ab0e927d14f951ca200dc5e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce"} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d154abbb9a8b96bb5c6e5e7241cade7cef39b6a6c696bf3e34e3dbb5833fa8f4"} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28aa89d9e8a973cdb6ee94b94951fa5d1402b62e5c2a8ec38be8cfebdfc49f87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b6ed889ac74ae8aad12ba9ce8a32b8593f32df2ab0e927d14f951ca200dc5e0"} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe24976d35f890e84f172c0b5c559014127a67f3690d3205a87d2a8540358e37","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28aa89d9e8a973cdb6ee94b94951fa5d1402b62e5c2a8ec38be8cfebdfc49f87"} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4896bf79e492d864a7af439c6ca97c3c4347e57b1ba3f216e3b9883fee258e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe24976d35f890e84f172c0b5c559014127a67f3690d3205a87d2a8540358e37"} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4896bf79e492d864a7af439c6ca97c3c4347e57b1ba3f216e3b9883fee258e5"} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f"} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b"} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b"} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b"} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b"} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b"} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b"} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b"} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b"} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b"} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b"} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:48:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b"} {"level":"debug","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b"} {"level":"debug","ts":"2026-07-06T22:48:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:48:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:48:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T22:48:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T22:48:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T22:48:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b"} {"level":"info","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bf243a4-69f6-4f71-8013-f78a48b97cd5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34920","PortSpecifier":{"PortValue":34920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6bf243a4-69f6-4f71-8013-f78a48b97cd5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bf243a4-69f6-4f71-8013-f78a48b97cd5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34920","PortSpecifier":{"PortValue":34920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378096,"nanos":326437216},"http":{"id":"6bf243a4-69f6-4f71-8013-f78a48b97cd5","method":"POST","headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6bf243a4-69f6-4f71-8013-f78a48b97cd5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6bf243a4-69f6-4f71-8013-f78a48b97cd5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"011dc850-13ad-4879-b525-4b025a565c36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"]}} {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6bf243a4-69f6-4f71-8013-f78a48b97cd5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"011dc850-13ad-4879-b525-4b025a565c36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d154abbb9a8b96bb5c6e5e7241cade7cef39b6a6c696bf3e34e3dbb5833fa8f4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bf243a4-69f6-4f71-8013-f78a48b97cd5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bf243a4-69f6-4f71-8013-f78a48b97cd5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bf243a4-69f6-4f71-8013-f78a48b97cd5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-65387d/rate-test-model-65387d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6bf243a4-69f6-4f71-8013-f78a48b97cd5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bf243a4-69f6-4f71-8013-f78a48b97cd5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bf243a4-69f6-4f71-8013-f78a48b97cd5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bf243a4-69f6-4f71-8013-f78a48b97cd5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bf243a4-69f6-4f71-8013-f78a48b97cd5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69e9c4d6-35b6-4836-884c-146b219d3009","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44598","PortSpecifier":{"PortValue":44598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"69e9c4d6-35b6-4836-884c-146b219d3009","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69e9c4d6-35b6-4836-884c-146b219d3009","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44598","PortSpecifier":{"PortValue":44598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378096,"nanos":365801493},"http":{"id":"69e9c4d6-35b6-4836-884c-146b219d3009","method":"POST","headers":{":authority":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"69e9c4d6-35b6-4836-884c-146b219d3009","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"69e9c4d6-35b6-4836-884c-146b219d3009","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"011dc850-13ad-4879-b525-4b025a565c36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"]}} {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"69e9c4d6-35b6-4836-884c-146b219d3009","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"011dc850-13ad-4879-b525-4b025a565c36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69e9c4d6-35b6-4836-884c-146b219d3009","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69e9c4d6-35b6-4836-884c-146b219d3009","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69e9c4d6-35b6-4836-884c-146b219d3009","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-944f9f/rate-test-model-944f9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"69e9c4d6-35b6-4836-884c-146b219d3009","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69e9c4d6-35b6-4836-884c-146b219d3009","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69e9c4d6-35b6-4836-884c-146b219d3009","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69e9c4d6-35b6-4836-884c-146b219d3009","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69e9c4d6-35b6-4836-884c-146b219d3009","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77c04710-76b5-4396-819c-9b7f0a0cb173","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34930","PortSpecifier":{"PortValue":34930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"77c04710-76b5-4396-819c-9b7f0a0cb173","method":"POST","path":"/ai-tenant-e2e-shared-a-65387d/rate-test-model-65387d/v1/completions","host":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77c04710-76b5-4396-819c-9b7f0a0cb173","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34930","PortSpecifier":{"PortValue":34930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378096,"nanos":402007888},"http":{"id":"77c04710-76b5-4396-819c-9b7f0a0cb173","method":"POST","headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-65387d/rate-test-model-65387d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"77c04710-76b5-4396-819c-9b7f0a0cb173","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Taw3Yjek51kaFp04_MUfavccpnrp6spuMinskJCEAGqVam72Leq3qXHaiUHN"} {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"77c04710-76b5-4396-819c-9b7f0a0cb173","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-65387d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Taw3Yjek51kaFp04_MUfavccpnrp6spuMinskJCEAGqVam72Leq3qXHaiUHN\"}"} {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"77c04710-76b5-4396-819c-9b7f0a0cb173","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-65387d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8f85e195-8d8e-4ce3-8c8e-f8472d074d17","keyName":"e2e-rate-a-27ad05","subscription":"e2e-rate-iso-a-27ad05","tenant":"e2e-shared-a-65387d","userId":"8f85e195-8d8e-4ce3-8c8e-f8472d074d17","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"77c04710-76b5-4396-819c-9b7f0a0cb173","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-65387d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-65387d/rate-test-model-65387d\",\"requestedSubscription\":\"e2e-rate-iso-a-27ad05\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"77c04710-76b5-4396-819c-9b7f0a0cb173","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-65387d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-65387d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-27ad05","namespace":"ai-tenant-e2e-shared-a-65387d","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"77c04710-76b5-4396-819c-9b7f0a0cb173","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77c04710-76b5-4396-819c-9b7f0a0cb173","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77c04710-76b5-4396-819c-9b7f0a0cb173","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77c04710-76b5-4396-819c-9b7f0a0cb173","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-65387d/rate-test-model-65387d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77c04710-76b5-4396-819c-9b7f0a0cb173","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77c04710-76b5-4396-819c-9b7f0a0cb173","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-27ad05"} {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77c04710-76b5-4396-819c-9b7f0a0cb173","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77c04710-76b5-4396-819c-9b7f0a0cb173","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77c04710-76b5-4396-819c-9b7f0a0cb173","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8f85e195-8d8e-4ce3-8c8e-f8472d074d17","keyName":"e2e-rate-a-27ad05","selected_subscription":"e2e-rate-iso-a-27ad05","selected_subscription_key":"ai-tenant-e2e-shared-a-65387d/e2e-rate-iso-a-27ad05@ai-tenant-e2e-shared-a-65387d/rate-test-model-65387d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-65387d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-27ad05","namespace":"ai-tenant-e2e-shared-a-65387d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77c04710-76b5-4396-819c-9b7f0a0cb173","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:48:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77c04710-76b5-4396-819c-9b7f0a0cb173","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:48:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e747e7d9-7344-470a-b73a-f96518627955","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34946","PortSpecifier":{"PortValue":34946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e747e7d9-7344-470a-b73a-f96518627955","method":"POST","path":"/ai-tenant-e2e-shared-a-65387d/rate-test-model-65387d/v1/completions","host":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:48:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e747e7d9-7344-470a-b73a-f96518627955","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34946","PortSpecifier":{"PortValue":34946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378097,"nanos":448480507},"http":{"id":"e747e7d9-7344-470a-b73a-f96518627955","method":"POST","headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-65387d/rate-test-model-65387d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:48:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e747e7d9-7344-470a-b73a-f96518627955","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Taw3Yjek51kaFp04_MUfavccpnrp6spuMinskJCEAGqVam72Leq3qXHaiUHN"} {"level":"debug","ts":"2026-07-06T22:48:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e747e7d9-7344-470a-b73a-f96518627955","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-65387d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Taw3Yjek51kaFp04_MUfavccpnrp6spuMinskJCEAGqVam72Leq3qXHaiUHN\"}"} {"level":"debug","ts":"2026-07-06T22:48:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e747e7d9-7344-470a-b73a-f96518627955","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-65387d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8f85e195-8d8e-4ce3-8c8e-f8472d074d17","keyName":"e2e-rate-a-27ad05","subscription":"e2e-rate-iso-a-27ad05","tenant":"e2e-shared-a-65387d","userId":"8f85e195-8d8e-4ce3-8c8e-f8472d074d17","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T22:48:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e747e7d9-7344-470a-b73a-f96518627955","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-65387d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-65387d/rate-test-model-65387d\",\"requestedSubscription\":\"e2e-rate-iso-a-27ad05\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T22:48:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e747e7d9-7344-470a-b73a-f96518627955","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-65387d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-65387d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-27ad05","namespace":"ai-tenant-e2e-shared-a-65387d","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T22:48:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e747e7d9-7344-470a-b73a-f96518627955","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:48:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e747e7d9-7344-470a-b73a-f96518627955","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e747e7d9-7344-470a-b73a-f96518627955","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e747e7d9-7344-470a-b73a-f96518627955","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-65387d/rate-test-model-65387d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e747e7d9-7344-470a-b73a-f96518627955","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e747e7d9-7344-470a-b73a-f96518627955","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:48:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e747e7d9-7344-470a-b73a-f96518627955","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-27ad05"} {"level":"debug","ts":"2026-07-06T22:48:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e747e7d9-7344-470a-b73a-f96518627955","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T22:48:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e747e7d9-7344-470a-b73a-f96518627955","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8f85e195-8d8e-4ce3-8c8e-f8472d074d17","keyName":"e2e-rate-a-27ad05","selected_subscription":"e2e-rate-iso-a-27ad05","selected_subscription_key":"ai-tenant-e2e-shared-a-65387d/e2e-rate-iso-a-27ad05@ai-tenant-e2e-shared-a-65387d/rate-test-model-65387d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-65387d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-27ad05","namespace":"ai-tenant-e2e-shared-a-65387d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T22:48:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e747e7d9-7344-470a-b73a-f96518627955","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:48:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e747e7d9-7344-470a-b73a-f96518627955","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:48:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15bde3f1-41f8-4160-9b83-7d51db8090a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34960","PortSpecifier":{"PortValue":34960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"15bde3f1-41f8-4160-9b83-7d51db8090a5","method":"POST","path":"/ai-tenant-e2e-shared-a-65387d/rate-test-model-65387d/v1/completions","host":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:48:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15bde3f1-41f8-4160-9b83-7d51db8090a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34960","PortSpecifier":{"PortValue":34960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378098,"nanos":486736114},"http":{"id":"15bde3f1-41f8-4160-9b83-7d51db8090a5","method":"POST","headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-65387d/rate-test-model-65387d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:48:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"15bde3f1-41f8-4160-9b83-7d51db8090a5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Taw3Yjek51kaFp04_MUfavccpnrp6spuMinskJCEAGqVam72Leq3qXHaiUHN"} {"level":"debug","ts":"2026-07-06T22:48:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"15bde3f1-41f8-4160-9b83-7d51db8090a5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-65387d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Taw3Yjek51kaFp04_MUfavccpnrp6spuMinskJCEAGqVam72Leq3qXHaiUHN\"}"} {"level":"debug","ts":"2026-07-06T22:48:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"15bde3f1-41f8-4160-9b83-7d51db8090a5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-65387d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8f85e195-8d8e-4ce3-8c8e-f8472d074d17","keyName":"e2e-rate-a-27ad05","subscription":"e2e-rate-iso-a-27ad05","tenant":"e2e-shared-a-65387d","userId":"8f85e195-8d8e-4ce3-8c8e-f8472d074d17","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T22:48:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"15bde3f1-41f8-4160-9b83-7d51db8090a5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-65387d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-65387d/rate-test-model-65387d\",\"requestedSubscription\":\"e2e-rate-iso-a-27ad05\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T22:48:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"15bde3f1-41f8-4160-9b83-7d51db8090a5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-65387d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-65387d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-27ad05","namespace":"ai-tenant-e2e-shared-a-65387d","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T22:48:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"15bde3f1-41f8-4160-9b83-7d51db8090a5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:48:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15bde3f1-41f8-4160-9b83-7d51db8090a5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15bde3f1-41f8-4160-9b83-7d51db8090a5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15bde3f1-41f8-4160-9b83-7d51db8090a5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15bde3f1-41f8-4160-9b83-7d51db8090a5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-65387d/rate-test-model-65387d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15bde3f1-41f8-4160-9b83-7d51db8090a5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:48:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15bde3f1-41f8-4160-9b83-7d51db8090a5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-27ad05"} {"level":"debug","ts":"2026-07-06T22:48:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15bde3f1-41f8-4160-9b83-7d51db8090a5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T22:48:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15bde3f1-41f8-4160-9b83-7d51db8090a5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8f85e195-8d8e-4ce3-8c8e-f8472d074d17","keyName":"e2e-rate-a-27ad05","selected_subscription":"e2e-rate-iso-a-27ad05","selected_subscription_key":"ai-tenant-e2e-shared-a-65387d/e2e-rate-iso-a-27ad05@ai-tenant-e2e-shared-a-65387d/rate-test-model-65387d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-65387d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-27ad05","namespace":"ai-tenant-e2e-shared-a-65387d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T22:48:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15bde3f1-41f8-4160-9b83-7d51db8090a5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:48:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15bde3f1-41f8-4160-9b83-7d51db8090a5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50f94c48-11f5-494c-bedc-2fae543638ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49430","PortSpecifier":{"PortValue":49430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"50f94c48-11f5-494c-bedc-2fae543638ae","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50f94c48-11f5-494c-bedc-2fae543638ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49430","PortSpecifier":{"PortValue":49430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378111,"nanos":366040615},"http":{"id":"50f94c48-11f5-494c-bedc-2fae543638ae","method":"POST","headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"50f94c48-11f5-494c-bedc-2fae543638ae","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"50f94c48-11f5-494c-bedc-2fae543638ae","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"011dc850-13ad-4879-b525-4b025a565c36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"]}} {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"50f94c48-11f5-494c-bedc-2fae543638ae","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"011dc850-13ad-4879-b525-4b025a565c36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d154abbb9a8b96bb5c6e5e7241cade7cef39b6a6c696bf3e34e3dbb5833fa8f4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50f94c48-11f5-494c-bedc-2fae543638ae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50f94c48-11f5-494c-bedc-2fae543638ae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50f94c48-11f5-494c-bedc-2fae543638ae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-65387d/rate-test-model-65387d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"50f94c48-11f5-494c-bedc-2fae543638ae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50f94c48-11f5-494c-bedc-2fae543638ae","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50f94c48-11f5-494c-bedc-2fae543638ae","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50f94c48-11f5-494c-bedc-2fae543638ae","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50f94c48-11f5-494c-bedc-2fae543638ae","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04171f20-ff7f-4e96-8251-df280f0e0413","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34494","PortSpecifier":{"PortValue":34494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"04171f20-ff7f-4e96-8251-df280f0e0413","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04171f20-ff7f-4e96-8251-df280f0e0413","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34494","PortSpecifier":{"PortValue":34494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378111,"nanos":426700749},"http":{"id":"04171f20-ff7f-4e96-8251-df280f0e0413","method":"POST","headers":{":authority":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"04171f20-ff7f-4e96-8251-df280f0e0413","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"04171f20-ff7f-4e96-8251-df280f0e0413","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"011dc850-13ad-4879-b525-4b025a565c36","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"]}} {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"04171f20-ff7f-4e96-8251-df280f0e0413","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bffd1aa9bb4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ec44f72-0bb2-41e1-a536-769444b46408"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"011dc850-13ad-4879-b525-4b025a565c36","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04171f20-ff7f-4e96-8251-df280f0e0413","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04171f20-ff7f-4e96-8251-df280f0e0413","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04171f20-ff7f-4e96-8251-df280f0e0413","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-944f9f/rate-test-model-944f9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"04171f20-ff7f-4e96-8251-df280f0e0413","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04171f20-ff7f-4e96-8251-df280f0e0413","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04171f20-ff7f-4e96-8251-df280f0e0413","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04171f20-ff7f-4e96-8251-df280f0e0413","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04171f20-ff7f-4e96-8251-df280f0e0413","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2674f946-b754-4a7d-bd68-35c1598eebf4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49436","PortSpecifier":{"PortValue":49436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2674f946-b754-4a7d-bd68-35c1598eebf4","method":"POST","path":"/ai-tenant-e2e-shared-a-65387d/rate-test-model-65387d/v1/completions","host":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2674f946-b754-4a7d-bd68-35c1598eebf4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49436","PortSpecifier":{"PortValue":49436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378111,"nanos":459644455},"http":{"id":"2674f946-b754-4a7d-bd68-35c1598eebf4","method":"POST","headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-65387d/rate-test-model-65387d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2674f946-b754-4a7d-bd68-35c1598eebf4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GIkfxBCBM1A4BK4a_upy6fYWXo9pahQNFshzVrdMrClu6qvp4p57yK6QZR4r"} {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2674f946-b754-4a7d-bd68-35c1598eebf4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-65387d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GIkfxBCBM1A4BK4a_upy6fYWXo9pahQNFshzVrdMrClu6qvp4p57yK6QZR4r\"}"} {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2674f946-b754-4a7d-bd68-35c1598eebf4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-65387d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d57d37d5-d53c-47f8-b2d9-db25f628f8a8","keyName":"e2e-rate-a-3a2036","subscription":"e2e-rate-iso-a-3a2036","tenant":"e2e-shared-a-65387d","userId":"d57d37d5-d53c-47f8-b2d9-db25f628f8a8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2674f946-b754-4a7d-bd68-35c1598eebf4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-65387d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-65387d/rate-test-model-65387d\",\"requestedSubscription\":\"e2e-rate-iso-a-3a2036\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2674f946-b754-4a7d-bd68-35c1598eebf4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-65387d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-65387d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3a2036","namespace":"ai-tenant-e2e-shared-a-65387d","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2674f946-b754-4a7d-bd68-35c1598eebf4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2674f946-b754-4a7d-bd68-35c1598eebf4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2674f946-b754-4a7d-bd68-35c1598eebf4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2674f946-b754-4a7d-bd68-35c1598eebf4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-65387d/rate-test-model-65387d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2674f946-b754-4a7d-bd68-35c1598eebf4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2674f946-b754-4a7d-bd68-35c1598eebf4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3a2036"} {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2674f946-b754-4a7d-bd68-35c1598eebf4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2674f946-b754-4a7d-bd68-35c1598eebf4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2674f946-b754-4a7d-bd68-35c1598eebf4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d57d37d5-d53c-47f8-b2d9-db25f628f8a8","keyName":"e2e-rate-a-3a2036","selected_subscription":"e2e-rate-iso-a-3a2036","selected_subscription_key":"ai-tenant-e2e-shared-a-65387d/e2e-rate-iso-a-3a2036@ai-tenant-e2e-shared-a-65387d/rate-test-model-65387d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-65387d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3a2036","namespace":"ai-tenant-e2e-shared-a-65387d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2674f946-b754-4a7d-bd68-35c1598eebf4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:48:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2674f946-b754-4a7d-bd68-35c1598eebf4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:48:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87dde3e7-fe5c-42b2-a4cd-0992edb31830","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49450","PortSpecifier":{"PortValue":49450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87dde3e7-fe5c-42b2-a4cd-0992edb31830","method":"POST","path":"/ai-tenant-e2e-shared-a-65387d/rate-test-model-65387d/v1/completions","host":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:48:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87dde3e7-fe5c-42b2-a4cd-0992edb31830","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49450","PortSpecifier":{"PortValue":49450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378112,"nanos":496208952},"http":{"id":"87dde3e7-fe5c-42b2-a4cd-0992edb31830","method":"POST","headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-65387d/rate-test-model-65387d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:48:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87dde3e7-fe5c-42b2-a4cd-0992edb31830","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GIkfxBCBM1A4BK4a_upy6fYWXo9pahQNFshzVrdMrClu6qvp4p57yK6QZR4r"} {"level":"debug","ts":"2026-07-06T22:48:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87dde3e7-fe5c-42b2-a4cd-0992edb31830","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-65387d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GIkfxBCBM1A4BK4a_upy6fYWXo9pahQNFshzVrdMrClu6qvp4p57yK6QZR4r\"}"} {"level":"debug","ts":"2026-07-06T22:48:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87dde3e7-fe5c-42b2-a4cd-0992edb31830","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-65387d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d57d37d5-d53c-47f8-b2d9-db25f628f8a8","keyName":"e2e-rate-a-3a2036","subscription":"e2e-rate-iso-a-3a2036","tenant":"e2e-shared-a-65387d","userId":"d57d37d5-d53c-47f8-b2d9-db25f628f8a8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T22:48:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87dde3e7-fe5c-42b2-a4cd-0992edb31830","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-65387d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-65387d/rate-test-model-65387d\",\"requestedSubscription\":\"e2e-rate-iso-a-3a2036\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T22:48:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87dde3e7-fe5c-42b2-a4cd-0992edb31830","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-65387d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-65387d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3a2036","namespace":"ai-tenant-e2e-shared-a-65387d","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T22:48:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87dde3e7-fe5c-42b2-a4cd-0992edb31830","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:48:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87dde3e7-fe5c-42b2-a4cd-0992edb31830","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87dde3e7-fe5c-42b2-a4cd-0992edb31830","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87dde3e7-fe5c-42b2-a4cd-0992edb31830","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-65387d/rate-test-model-65387d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87dde3e7-fe5c-42b2-a4cd-0992edb31830","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87dde3e7-fe5c-42b2-a4cd-0992edb31830","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3a2036"} {"level":"debug","ts":"2026-07-06T22:48:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87dde3e7-fe5c-42b2-a4cd-0992edb31830","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T22:48:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87dde3e7-fe5c-42b2-a4cd-0992edb31830","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:48:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87dde3e7-fe5c-42b2-a4cd-0992edb31830","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d57d37d5-d53c-47f8-b2d9-db25f628f8a8","keyName":"e2e-rate-a-3a2036","selected_subscription":"e2e-rate-iso-a-3a2036","selected_subscription_key":"ai-tenant-e2e-shared-a-65387d/e2e-rate-iso-a-3a2036@ai-tenant-e2e-shared-a-65387d/rate-test-model-65387d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-65387d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3a2036","namespace":"ai-tenant-e2e-shared-a-65387d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T22:48:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87dde3e7-fe5c-42b2-a4cd-0992edb31830","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:48:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87dde3e7-fe5c-42b2-a4cd-0992edb31830","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71380d8c-6ca9-48e0-b750-d5eec134c1fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49456","PortSpecifier":{"PortValue":49456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71380d8c-6ca9-48e0-b750-d5eec134c1fb","method":"POST","path":"/ai-tenant-e2e-shared-a-65387d/rate-test-model-65387d/v1/completions","host":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71380d8c-6ca9-48e0-b750-d5eec134c1fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49456","PortSpecifier":{"PortValue":49456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378113,"nanos":530380433},"http":{"id":"71380d8c-6ca9-48e0-b750-d5eec134c1fb","method":"POST","headers":{":authority":"e2e-shared-a-65387d.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-65387d/rate-test-model-65387d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71380d8c-6ca9-48e0-b750-d5eec134c1fb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GIkfxBCBM1A4BK4a_upy6fYWXo9pahQNFshzVrdMrClu6qvp4p57yK6QZR4r"} {"level":"debug","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"71380d8c-6ca9-48e0-b750-d5eec134c1fb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-65387d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GIkfxBCBM1A4BK4a_upy6fYWXo9pahQNFshzVrdMrClu6qvp4p57yK6QZR4r\"}"} {"level":"debug","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"71380d8c-6ca9-48e0-b750-d5eec134c1fb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-65387d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d57d37d5-d53c-47f8-b2d9-db25f628f8a8","keyName":"e2e-rate-a-3a2036","subscription":"e2e-rate-iso-a-3a2036","tenant":"e2e-shared-a-65387d","userId":"d57d37d5-d53c-47f8-b2d9-db25f628f8a8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"71380d8c-6ca9-48e0-b750-d5eec134c1fb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-65387d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-65387d/rate-test-model-65387d\",\"requestedSubscription\":\"e2e-rate-iso-a-3a2036\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"71380d8c-6ca9-48e0-b750-d5eec134c1fb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-65387d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-65387d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3a2036","namespace":"ai-tenant-e2e-shared-a-65387d","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71380d8c-6ca9-48e0-b750-d5eec134c1fb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71380d8c-6ca9-48e0-b750-d5eec134c1fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71380d8c-6ca9-48e0-b750-d5eec134c1fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71380d8c-6ca9-48e0-b750-d5eec134c1fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-65387d/rate-test-model-65387d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71380d8c-6ca9-48e0-b750-d5eec134c1fb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71380d8c-6ca9-48e0-b750-d5eec134c1fb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71380d8c-6ca9-48e0-b750-d5eec134c1fb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71380d8c-6ca9-48e0-b750-d5eec134c1fb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3a2036"} {"level":"debug","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71380d8c-6ca9-48e0-b750-d5eec134c1fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d57d37d5-d53c-47f8-b2d9-db25f628f8a8","keyName":"e2e-rate-a-3a2036","selected_subscription":"e2e-rate-iso-a-3a2036","selected_subscription_key":"ai-tenant-e2e-shared-a-65387d/e2e-rate-iso-a-3a2036@ai-tenant-e2e-shared-a-65387d/rate-test-model-65387d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-65387d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3a2036","namespace":"ai-tenant-e2e-shared-a-65387d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71380d8c-6ca9-48e0-b750-d5eec134c1fb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71380d8c-6ca9-48e0-b750-d5eec134c1fb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7849c272-fbbc-4881-ad5a-00ef0f0928b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34502","PortSpecifier":{"PortValue":34502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7849c272-fbbc-4881-ad5a-00ef0f0928b4","method":"POST","path":"/ai-tenant-e2e-shared-b-944f9f/rate-test-model-944f9f/v1/completions","host":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7849c272-fbbc-4881-ad5a-00ef0f0928b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34502","PortSpecifier":{"PortValue":34502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378113,"nanos":565364694},"http":{"id":"7849c272-fbbc-4881-ad5a-00ef0f0928b4","method":"POST","headers":{":authority":"e2e-shared-b-944f9f.apps.9fca8056-04b1-43a8-b40c-bffd1aa9bb4b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-944f9f/rate-test-model-944f9f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7849c272-fbbc-4881-ad5a-00ef0f0928b4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-dMcUbnZIgd4CZdTi_URnIZbCkfE4pDQGGsDKLHGWCZL5fXhSan8moqFv28nN"} {"level":"debug","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7849c272-fbbc-4881-ad5a-00ef0f0928b4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-944f9f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-dMcUbnZIgd4CZdTi_URnIZbCkfE4pDQGGsDKLHGWCZL5fXhSan8moqFv28nN\"}"} {"level":"debug","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7849c272-fbbc-4881-ad5a-00ef0f0928b4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-944f9f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8330d219-cd21-4dc4-afaf-75eb591a41a2","keyName":"e2e-rate-b-3a2036","subscription":"e2e-rate-iso-b-3a2036","tenant":"e2e-shared-b-944f9f","userId":"8330d219-cd21-4dc4-afaf-75eb591a41a2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7849c272-fbbc-4881-ad5a-00ef0f0928b4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-944f9f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-944f9f/rate-test-model-944f9f\",\"requestedSubscription\":\"e2e-rate-iso-b-3a2036\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7849c272-fbbc-4881-ad5a-00ef0f0928b4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-944f9f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-944f9f","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-3a2036","namespace":"ai-tenant-e2e-shared-b-944f9f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7849c272-fbbc-4881-ad5a-00ef0f0928b4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7849c272-fbbc-4881-ad5a-00ef0f0928b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7849c272-fbbc-4881-ad5a-00ef0f0928b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7849c272-fbbc-4881-ad5a-00ef0f0928b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-944f9f/rate-test-model-944f9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7849c272-fbbc-4881-ad5a-00ef0f0928b4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7849c272-fbbc-4881-ad5a-00ef0f0928b4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7849c272-fbbc-4881-ad5a-00ef0f0928b4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-3a2036"} {"level":"debug","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7849c272-fbbc-4881-ad5a-00ef0f0928b4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7849c272-fbbc-4881-ad5a-00ef0f0928b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8330d219-cd21-4dc4-afaf-75eb591a41a2","keyName":"e2e-rate-b-3a2036","selected_subscription":"e2e-rate-iso-b-3a2036","selected_subscription_key":"ai-tenant-e2e-shared-b-944f9f/e2e-rate-iso-b-3a2036@ai-tenant-e2e-shared-b-944f9f/rate-test-model-944f9f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-944f9f","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-3a2036","namespace":"ai-tenant-e2e-shared-b-944f9f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7849c272-fbbc-4881-ad5a-00ef0f0928b4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T22:48:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7849c272-fbbc-4881-ad5a-00ef0f0928b4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T22:48:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28019459a5995f333d69b1418cea65557adbcfcb4123fd7760e750590a141446"} {"level":"info","ts":"2026-07-06T22:48:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0a0a09baacf1e13e931cd28d9282f898247d51d77e2a0b29cd8035c7e51463d"} {"level":"info","ts":"2026-07-06T22:48:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6afefed7b78107259fc25246555affca43a7a861797387ad42331e41ba8722ce"} {"level":"info","ts":"2026-07-06T22:48:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28aa89d9e8a973cdb6ee94b94951fa5d1402b62e5c2a8ec38be8cfebdfc49f87"} {"level":"info","ts":"2026-07-06T22:48:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3cd278f8ad877f6e35c388f6e5ca44ea14ef5b351668b613c238e95acc0d503"} {"level":"info","ts":"2026-07-06T22:48:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aedb3614d0138fed3587bab7579eafa9721e25587c458dc4d42c53d1e3508421"} {"level":"info","ts":"2026-07-06T22:48:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe24976d35f890e84f172c0b5c559014127a67f3690d3205a87d2a8540358e37"} {"level":"info","ts":"2026-07-06T22:48:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c3639e722aa44bb72f626ce892d17cf99a7a0e7a2882f711350ddebabb38828"} {"level":"info","ts":"2026-07-06T22:48:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/574ebfd2b0c4822fcf311eb09be52b979468c81374791a61f56de467d0f6e55d"} {"level":"info","ts":"2026-07-06T22:48:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4896bf79e492d864a7af439c6ca97c3c4347e57b1ba3f216e3b9883fee258e5"} {"level":"info","ts":"2026-07-06T22:48:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b6ed889ac74ae8aad12ba9ce8a32b8593f32df2ab0e927d14f951ca200dc5e0"} {"level":"info","ts":"2026-07-06T22:48:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca277187a9052ca5c0897b534ea7906f4953c1fe9778c7f21e3011bab6e7f583"} {"level":"info","ts":"2026-07-06T22:48:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/100d87fd6eda0e8906c61b537f973279bfd84599a06725b1367a2f17dad25e06"} {"level":"info","ts":"2026-07-06T22:48:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fd929867be7a89d638205324e06795806cac46d53dc56fc10c7b1604464ec3b"} {"level":"info","ts":"2026-07-06T22:48:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6400a226fed98e0e8a6508a1fc215ba413a347b70b082ec4543bd4c49967d395"} {"level":"info","ts":"2026-07-06T22:48:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d154abbb9a8b96bb5c6e5e7241cade7cef39b6a6c696bf3e34e3dbb5833fa8f4"} {"level":"info","ts":"2026-07-06T22:48:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d89b74fc958934fb6902926dfee6102c1196f7081058dd3bcad17c7f8d001b6f"} {"level":"info","ts":"2026-07-06T22:48:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6554c8d2f6689c3a0ea0ff908865302ae3371e4812b682df1b8d17d4f19b75a"} {"level":"info","ts":"2026-07-06T22:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4159fef869fc377f042a21998511e4230372b30d5098706cc107c1195c202e2a"} {"level":"info","ts":"2026-07-06T22:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31e8f88a182ffb7d22b44dbae372f70080506bc000f1350cde1f731d970a9a24"}