--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-21T13:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290"} {"level":"info","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"} {"level":"info","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290"} {"level":"info","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"} {"level":"info","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e"} {"level":"info","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290"} {"level":"info","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79"} {"level":"info","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e"} {"level":"info","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290"} {"level":"info","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79"} {"level":"debug","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e"} {"level":"info","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290"} {"level":"info","ts":"2026-07-21T13:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79"} {"level":"info","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"380b32e1-7007-45f4-b309-2abe705c4e85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39196","PortSpecifier":{"PortValue":39196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"380b32e1-7007-45f4-b309-2abe705c4e85","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"380b32e1-7007-45f4-b309-2abe705c4e85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39196","PortSpecifier":{"PortValue":39196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640137,"nanos":255186995},"http":{"id":"380b32e1-7007-45f4-b309-2abe705c4e85","method":"POST","headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"380b32e1-7007-45f4-b309-2abe705c4e85","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"380b32e1-7007-45f4-b309-2abe705c4e85","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"]}} {"level":"debug","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"380b32e1-7007-45f4-b309-2abe705c4e85","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"380b32e1-7007-45f4-b309-2abe705c4e85","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"380b32e1-7007-45f4-b309-2abe705c4e85","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"380b32e1-7007-45f4-b309-2abe705c4e85","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3a013/auth-test-model-b3a013\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3a013/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"380b32e1-7007-45f4-b309-2abe705c4e85","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"380b32e1-7007-45f4-b309-2abe705c4e85","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"380b32e1-7007-45f4-b309-2abe705c4e85","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"380b32e1-7007-45f4-b309-2abe705c4e85","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"380b32e1-7007-45f4-b309-2abe705c4e85","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4cd1d6fc-84c9-4a18-aa95-25437370708a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41128","PortSpecifier":{"PortValue":41128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4cd1d6fc-84c9-4a18-aa95-25437370708a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4cd1d6fc-84c9-4a18-aa95-25437370708a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41128","PortSpecifier":{"PortValue":41128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640137,"nanos":314978239},"http":{"id":"4cd1d6fc-84c9-4a18-aa95-25437370708a","method":"POST","headers":{":authority":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4cd1d6fc-84c9-4a18-aa95-25437370708a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4cd1d6fc-84c9-4a18-aa95-25437370708a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"]}} {"level":"debug","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4cd1d6fc-84c9-4a18-aa95-25437370708a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cd1d6fc-84c9-4a18-aa95-25437370708a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cd1d6fc-84c9-4a18-aa95-25437370708a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cd1d6fc-84c9-4a18-aa95-25437370708a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cfed01/auth-test-model-cfed01\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cfed01/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4cd1d6fc-84c9-4a18-aa95-25437370708a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cd1d6fc-84c9-4a18-aa95-25437370708a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cd1d6fc-84c9-4a18-aa95-25437370708a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4cd1d6fc-84c9-4a18-aa95-25437370708a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4cd1d6fc-84c9-4a18-aa95-25437370708a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46a59fa8-81fd-49a0-9e4f-44029cb68ef6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39208","PortSpecifier":{"PortValue":39208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"46a59fa8-81fd-49a0-9e4f-44029cb68ef6","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46a59fa8-81fd-49a0-9e4f-44029cb68ef6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39208","PortSpecifier":{"PortValue":39208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640137,"nanos":368634855},"http":{"id":"46a59fa8-81fd-49a0-9e4f-44029cb68ef6","method":"GET","headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"46a59fa8-81fd-49a0-9e4f-44029cb68ef6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XMeQvIvs3mqocNIm_lwiKW6FnLlaDc1jaBIVGUr4i2l1GtMdqHg4v1kQTqyp"} {"level":"debug","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"46a59fa8-81fd-49a0-9e4f-44029cb68ef6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XMeQvIvs3mqocNIm_lwiKW6FnLlaDc1jaBIVGUr4i2l1GtMdqHg4v1kQTqyp\"}"} {"level":"debug","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"46a59fa8-81fd-49a0-9e4f-44029cb68ef6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"408b97af-72cf-4411-b5dd-4b11bb0ea399","keyName":"e2e-auth-iso-a-7fc086","subscription":"e2e-auth-iso-533b65","tenant":"e2e-shared-a-b3a013","userId":"408b97af-72cf-4411-b5dd-4b11bb0ea399","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"46a59fa8-81fd-49a0-9e4f-44029cb68ef6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46a59fa8-81fd-49a0-9e4f-44029cb68ef6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46a59fa8-81fd-49a0-9e4f-44029cb68ef6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46a59fa8-81fd-49a0-9e4f-44029cb68ef6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3a013/auth-test-model-b3a013\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3a013/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46a59fa8-81fd-49a0-9e4f-44029cb68ef6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46a59fa8-81fd-49a0-9e4f-44029cb68ef6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"46a59fa8-81fd-49a0-9e4f-44029cb68ef6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46a59fa8-81fd-49a0-9e4f-44029cb68ef6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-533b65"} {"level":"info","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46a59fa8-81fd-49a0-9e4f-44029cb68ef6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T13:22:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46a59fa8-81fd-49a0-9e4f-44029cb68ef6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T13:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"} {"level":"info","ts":"2026-07-21T13:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79"} {"level":"info","ts":"2026-07-21T13:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f"} {"level":"info","ts":"2026-07-21T13:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"} {"level":"info","ts":"2026-07-21T13:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290"} {"level":"info","ts":"2026-07-21T13:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50"} {"level":"info","ts":"2026-07-21T13:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"} {"level":"info","ts":"2026-07-21T13:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e"} {"level":"info","ts":"2026-07-21T13:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084"} {"level":"info","ts":"2026-07-21T13:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0"} {"level":"info","ts":"2026-07-21T13:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"} {"level":"info","ts":"2026-07-21T13:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"} {"level":"debug","ts":"2026-07-21T13:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"} {"level":"debug","ts":"2026-07-21T13:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"} {"level":"debug","ts":"2026-07-21T13:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"} {"level":"info","ts":"2026-07-21T13:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0"} {"level":"info","ts":"2026-07-21T13:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0"} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0"} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0"} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0"} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f"} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"} {"level":"error","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f"} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f"} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f"} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290"} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290"} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290"} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50"} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50"} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50"} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084"} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"} {"level":"error","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50"} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084"} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"} {"level":"debug","ts":"2026-07-21T13:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79"} {"level":"info","ts":"2026-07-21T13:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"} {"level":"info","ts":"2026-07-21T13:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"} {"level":"info","ts":"2026-07-21T13:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e"} {"level":"info","ts":"2026-07-21T13:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79"} {"level":"info","ts":"2026-07-21T13:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e"} {"level":"info","ts":"2026-07-21T13:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e"} {"level":"info","ts":"2026-07-21T13:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e"} {"level":"error","ts":"2026-07-21T13:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T13:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9840e107-422e-4bd5-b17a-f1fa96a83656","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49206","PortSpecifier":{"PortValue":49206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9840e107-422e-4bd5-b17a-f1fa96a83656","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9840e107-422e-4bd5-b17a-f1fa96a83656","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49206","PortSpecifier":{"PortValue":49206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640152,"nanos":461445404},"http":{"id":"9840e107-422e-4bd5-b17a-f1fa96a83656","method":"POST","headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9840e107-422e-4bd5-b17a-f1fa96a83656","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9840e107-422e-4bd5-b17a-f1fa96a83656","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"]}} {"level":"debug","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9840e107-422e-4bd5-b17a-f1fa96a83656","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9840e107-422e-4bd5-b17a-f1fa96a83656","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9840e107-422e-4bd5-b17a-f1fa96a83656","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9840e107-422e-4bd5-b17a-f1fa96a83656","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3a013/auth-test-model-b3a013\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3a013/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9840e107-422e-4bd5-b17a-f1fa96a83656","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9840e107-422e-4bd5-b17a-f1fa96a83656","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9840e107-422e-4bd5-b17a-f1fa96a83656","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9840e107-422e-4bd5-b17a-f1fa96a83656","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9840e107-422e-4bd5-b17a-f1fa96a83656","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"045531d4-89db-4cf2-a4b6-37accac533f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44212","PortSpecifier":{"PortValue":44212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"045531d4-89db-4cf2-a4b6-37accac533f6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"045531d4-89db-4cf2-a4b6-37accac533f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44212","PortSpecifier":{"PortValue":44212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640152,"nanos":499349719},"http":{"id":"045531d4-89db-4cf2-a4b6-37accac533f6","method":"POST","headers":{":authority":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"045531d4-89db-4cf2-a4b6-37accac533f6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"045531d4-89db-4cf2-a4b6-37accac533f6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"]}} {"level":"debug","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"045531d4-89db-4cf2-a4b6-37accac533f6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"045531d4-89db-4cf2-a4b6-37accac533f6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"045531d4-89db-4cf2-a4b6-37accac533f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"045531d4-89db-4cf2-a4b6-37accac533f6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cfed01/auth-test-model-cfed01\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cfed01/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"045531d4-89db-4cf2-a4b6-37accac533f6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"045531d4-89db-4cf2-a4b6-37accac533f6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"045531d4-89db-4cf2-a4b6-37accac533f6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"045531d4-89db-4cf2-a4b6-37accac533f6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"045531d4-89db-4cf2-a4b6-37accac533f6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da38ee42-f70a-4824-a7f1-ff3d0868ba75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44224","PortSpecifier":{"PortValue":44224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"da38ee42-f70a-4824-a7f1-ff3d0868ba75","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da38ee42-f70a-4824-a7f1-ff3d0868ba75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44224","PortSpecifier":{"PortValue":44224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640152,"nanos":540074214},"http":{"id":"da38ee42-f70a-4824-a7f1-ff3d0868ba75","method":"GET","headers":{":authority":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"da38ee42-f70a-4824-a7f1-ff3d0868ba75","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-LztJcinzBmS5iJMT_ktphKXhY1kaIY0NHPIRlz4KgxSfPGwbZ5lvqTmexycU"} {"level":"debug","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"da38ee42-f70a-4824-a7f1-ff3d0868ba75","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-cfed01.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-LztJcinzBmS5iJMT_ktphKXhY1kaIY0NHPIRlz4KgxSfPGwbZ5lvqTmexycU\"}"} {"level":"debug","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"da38ee42-f70a-4824-a7f1-ff3d0868ba75","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-cfed01.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"da38ee42-f70a-4824-a7f1-ff3d0868ba75","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da38ee42-f70a-4824-a7f1-ff3d0868ba75","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"da38ee42-f70a-4824-a7f1-ff3d0868ba75","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da38ee42-f70a-4824-a7f1-ff3d0868ba75","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-21T13:22:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da38ee42-f70a-4824-a7f1-ff3d0868ba75","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-21T13:22:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79"} {"level":"info","ts":"2026-07-21T13:22:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f"} {"level":"info","ts":"2026-07-21T13:22:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"} {"level":"info","ts":"2026-07-21T13:22:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"} {"level":"info","ts":"2026-07-21T13:22:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290"} {"level":"info","ts":"2026-07-21T13:22:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084"} {"level":"info","ts":"2026-07-21T13:22:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e"} {"level":"info","ts":"2026-07-21T13:22:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"} {"level":"info","ts":"2026-07-21T13:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50"} {"level":"info","ts":"2026-07-21T13:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"} {"level":"info","ts":"2026-07-21T13:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0"} {"level":"info","ts":"2026-07-21T13:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290"} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290"} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290"} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0"} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0"} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f"} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f"} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0"} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f"} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0"} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f"} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0"} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084"} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79"} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084"} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79"} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084"} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79"} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084"} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50"} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50"} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e"} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50"} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e"} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:22:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"} {"level":"info","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1134e946-7730-4756-8ff9-2109bc69f084","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49792","PortSpecifier":{"PortValue":49792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1134e946-7730-4756-8ff9-2109bc69f084","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1134e946-7730-4756-8ff9-2109bc69f084","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49792","PortSpecifier":{"PortValue":49792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640171,"nanos":813607941},"http":{"id":"1134e946-7730-4756-8ff9-2109bc69f084","method":"POST","headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1134e946-7730-4756-8ff9-2109bc69f084","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1134e946-7730-4756-8ff9-2109bc69f084","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"]}} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1134e946-7730-4756-8ff9-2109bc69f084","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1134e946-7730-4756-8ff9-2109bc69f084","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1134e946-7730-4756-8ff9-2109bc69f084","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1134e946-7730-4756-8ff9-2109bc69f084","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3a013/auth-test-model-b3a013\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3a013/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1134e946-7730-4756-8ff9-2109bc69f084","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1134e946-7730-4756-8ff9-2109bc69f084","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1134e946-7730-4756-8ff9-2109bc69f084","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1134e946-7730-4756-8ff9-2109bc69f084","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1134e946-7730-4756-8ff9-2109bc69f084","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06bf9616-ef10-4607-9386-bddb2b0bef85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50048","PortSpecifier":{"PortValue":50048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"06bf9616-ef10-4607-9386-bddb2b0bef85","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06bf9616-ef10-4607-9386-bddb2b0bef85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50048","PortSpecifier":{"PortValue":50048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640171,"nanos":852305257},"http":{"id":"06bf9616-ef10-4607-9386-bddb2b0bef85","method":"POST","headers":{":authority":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"06bf9616-ef10-4607-9386-bddb2b0bef85","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"06bf9616-ef10-4607-9386-bddb2b0bef85","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"]}} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"06bf9616-ef10-4607-9386-bddb2b0bef85","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06bf9616-ef10-4607-9386-bddb2b0bef85","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06bf9616-ef10-4607-9386-bddb2b0bef85","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06bf9616-ef10-4607-9386-bddb2b0bef85","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cfed01/auth-test-model-cfed01\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cfed01/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"06bf9616-ef10-4607-9386-bddb2b0bef85","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06bf9616-ef10-4607-9386-bddb2b0bef85","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06bf9616-ef10-4607-9386-bddb2b0bef85","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06bf9616-ef10-4607-9386-bddb2b0bef85","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06bf9616-ef10-4607-9386-bddb2b0bef85","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"186f434d-7d3f-44fc-928e-34f8b710d4cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49802","PortSpecifier":{"PortValue":49802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"186f434d-7d3f-44fc-928e-34f8b710d4cf","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"186f434d-7d3f-44fc-928e-34f8b710d4cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49802","PortSpecifier":{"PortValue":49802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640171,"nanos":897885251},"http":{"id":"186f434d-7d3f-44fc-928e-34f8b710d4cf","method":"POST","headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"186f434d-7d3f-44fc-928e-34f8b710d4cf","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"186f434d-7d3f-44fc-928e-34f8b710d4cf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"]}} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"186f434d-7d3f-44fc-928e-34f8b710d4cf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"186f434d-7d3f-44fc-928e-34f8b710d4cf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"186f434d-7d3f-44fc-928e-34f8b710d4cf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"186f434d-7d3f-44fc-928e-34f8b710d4cf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3a013/auth-test-model-b3a013\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3a013/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"186f434d-7d3f-44fc-928e-34f8b710d4cf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"186f434d-7d3f-44fc-928e-34f8b710d4cf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"186f434d-7d3f-44fc-928e-34f8b710d4cf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"186f434d-7d3f-44fc-928e-34f8b710d4cf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"186f434d-7d3f-44fc-928e-34f8b710d4cf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0144079e-d859-4c2a-90c7-cb43078f4a0d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50052","PortSpecifier":{"PortValue":50052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0144079e-d859-4c2a-90c7-cb43078f4a0d","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0144079e-d859-4c2a-90c7-cb43078f4a0d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50052","PortSpecifier":{"PortValue":50052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640171,"nanos":946323041},"http":{"id":"0144079e-d859-4c2a-90c7-cb43078f4a0d","method":"POST","headers":{":authority":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0144079e-d859-4c2a-90c7-cb43078f4a0d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0144079e-d859-4c2a-90c7-cb43078f4a0d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"]}} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0144079e-d859-4c2a-90c7-cb43078f4a0d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0144079e-d859-4c2a-90c7-cb43078f4a0d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0144079e-d859-4c2a-90c7-cb43078f4a0d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0144079e-d859-4c2a-90c7-cb43078f4a0d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cfed01/auth-test-model-cfed01\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cfed01/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0144079e-d859-4c2a-90c7-cb43078f4a0d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0144079e-d859-4c2a-90c7-cb43078f4a0d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0144079e-d859-4c2a-90c7-cb43078f4a0d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0144079e-d859-4c2a-90c7-cb43078f4a0d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T13:22:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0144079e-d859-4c2a-90c7-cb43078f4a0d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T13:22:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290"} {"level":"info","ts":"2026-07-21T13:22:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79"} {"level":"info","ts":"2026-07-21T13:22:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084"} {"level":"info","ts":"2026-07-21T13:22:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"} {"level":"info","ts":"2026-07-21T13:22:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e"} {"level":"info","ts":"2026-07-21T13:22:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f"} {"level":"info","ts":"2026-07-21T13:22:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"} {"level":"info","ts":"2026-07-21T13:22:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"} {"level":"info","ts":"2026-07-21T13:22:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"} {"level":"info","ts":"2026-07-21T13:22:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0"} {"level":"info","ts":"2026-07-21T13:22:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50"} {"level":"info","ts":"2026-07-21T13:22:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0"} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f"} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0"} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f"} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0"} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f"} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e"} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f"} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e"} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e"} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e"} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79"} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79"} {"level":"error","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79"} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e"} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084"} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084"} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290"} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084"} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290"} {"level":"info","ts":"2026-07-21T13:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084"} {"level":"info","ts":"2026-07-21T13:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290"} {"level":"info","ts":"2026-07-21T13:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084"} {"level":"info","ts":"2026-07-21T13:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50"} {"level":"info","ts":"2026-07-21T13:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"} {"level":"info","ts":"2026-07-21T13:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084"} {"level":"debug","ts":"2026-07-21T13:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"} {"level":"info","ts":"2026-07-21T13:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50"} {"level":"info","ts":"2026-07-21T13:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084"} {"level":"info","ts":"2026-07-21T13:23:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"684f25d5-fe4f-4c5b-866a-d62908b38c1e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59752","PortSpecifier":{"PortValue":59752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"684f25d5-fe4f-4c5b-866a-d62908b38c1e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:23:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"684f25d5-fe4f-4c5b-866a-d62908b38c1e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59752","PortSpecifier":{"PortValue":59752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640186,"nanos":985301804},"http":{"id":"684f25d5-fe4f-4c5b-866a-d62908b38c1e","method":"POST","headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:23:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"684f25d5-fe4f-4c5b-866a-d62908b38c1e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T13:23:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"684f25d5-fe4f-4c5b-866a-d62908b38c1e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"]}} {"level":"debug","ts":"2026-07-21T13:23:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"684f25d5-fe4f-4c5b-866a-d62908b38c1e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:23:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"684f25d5-fe4f-4c5b-866a-d62908b38c1e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:23:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"684f25d5-fe4f-4c5b-866a-d62908b38c1e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:23:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"684f25d5-fe4f-4c5b-866a-d62908b38c1e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3a013/auth-test-model-b3a013\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3a013/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:23:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"684f25d5-fe4f-4c5b-866a-d62908b38c1e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T13:23:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"684f25d5-fe4f-4c5b-866a-d62908b38c1e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T13:23:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"684f25d5-fe4f-4c5b-866a-d62908b38c1e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T13:23:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"684f25d5-fe4f-4c5b-866a-d62908b38c1e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T13:23:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"684f25d5-fe4f-4c5b-866a-d62908b38c1e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c629b18b-e267-438d-8389-b45545cd766c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36956","PortSpecifier":{"PortValue":36956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c629b18b-e267-438d-8389-b45545cd766c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c629b18b-e267-438d-8389-b45545cd766c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36956","PortSpecifier":{"PortValue":36956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640187,"nanos":25029070},"http":{"id":"c629b18b-e267-438d-8389-b45545cd766c","method":"POST","headers":{":authority":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c629b18b-e267-438d-8389-b45545cd766c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c629b18b-e267-438d-8389-b45545cd766c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"]}} {"level":"debug","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c629b18b-e267-438d-8389-b45545cd766c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c629b18b-e267-438d-8389-b45545cd766c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c629b18b-e267-438d-8389-b45545cd766c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c629b18b-e267-438d-8389-b45545cd766c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cfed01/auth-test-model-cfed01\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cfed01/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c629b18b-e267-438d-8389-b45545cd766c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c629b18b-e267-438d-8389-b45545cd766c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c629b18b-e267-438d-8389-b45545cd766c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c629b18b-e267-438d-8389-b45545cd766c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c629b18b-e267-438d-8389-b45545cd766c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e1c6d33-d97b-433d-8362-88bf0f1e34d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36962","PortSpecifier":{"PortValue":36962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1e1c6d33-d97b-433d-8362-88bf0f1e34d5","method":"GET","path":"/maas-api/v1/api-keys/39eb8780-d4ae-4918-a015-b63c1544f5fc","host":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e1c6d33-d97b-433d-8362-88bf0f1e34d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36962","PortSpecifier":{"PortValue":36962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640187,"nanos":61337023},"http":{"id":"1e1c6d33-d97b-433d-8362-88bf0f1e34d5","method":"GET","headers":{":authority":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/39eb8780-d4ae-4918-a015-b63c1544f5fc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1e1c6d33-d97b-433d-8362-88bf0f1e34d5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1e1c6d33-d97b-433d-8362-88bf0f1e34d5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"]}} {"level":"debug","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1e1c6d33-d97b-433d-8362-88bf0f1e34d5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/39eb8780-d4ae-4918-a015-b63c1544f5fc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e1c6d33-d97b-433d-8362-88bf0f1e34d5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e1c6d33-d97b-433d-8362-88bf0f1e34d5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e1c6d33-d97b-433d-8362-88bf0f1e34d5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cfed01/auth-test-model-cfed01\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cfed01/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1e1c6d33-d97b-433d-8362-88bf0f1e34d5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e1c6d33-d97b-433d-8362-88bf0f1e34d5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e1c6d33-d97b-433d-8362-88bf0f1e34d5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e1c6d33-d97b-433d-8362-88bf0f1e34d5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e1c6d33-d97b-433d-8362-88bf0f1e34d5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48dcd4ac-605e-4f74-bcae-e229c9167a77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59762","PortSpecifier":{"PortValue":59762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"48dcd4ac-605e-4f74-bcae-e229c9167a77","method":"GET","path":"/maas-api/v1/api-keys/39eb8780-d4ae-4918-a015-b63c1544f5fc","host":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48dcd4ac-605e-4f74-bcae-e229c9167a77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59762","PortSpecifier":{"PortValue":59762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640187,"nanos":135797182},"http":{"id":"48dcd4ac-605e-4f74-bcae-e229c9167a77","method":"GET","headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/39eb8780-d4ae-4918-a015-b63c1544f5fc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"48dcd4ac-605e-4f74-bcae-e229c9167a77","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"48dcd4ac-605e-4f74-bcae-e229c9167a77","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"]}} {"level":"debug","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"48dcd4ac-605e-4f74-bcae-e229c9167a77","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/39eb8780-d4ae-4918-a015-b63c1544f5fc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48dcd4ac-605e-4f74-bcae-e229c9167a77","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48dcd4ac-605e-4f74-bcae-e229c9167a77","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48dcd4ac-605e-4f74-bcae-e229c9167a77","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3a013/auth-test-model-b3a013\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3a013/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"48dcd4ac-605e-4f74-bcae-e229c9167a77","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48dcd4ac-605e-4f74-bcae-e229c9167a77","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48dcd4ac-605e-4f74-bcae-e229c9167a77","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48dcd4ac-605e-4f74-bcae-e229c9167a77","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T13:23:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48dcd4ac-605e-4f74-bcae-e229c9167a77","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T13:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e"} {"level":"info","ts":"2026-07-21T13:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50"} {"level":"info","ts":"2026-07-21T13:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0"} {"level":"info","ts":"2026-07-21T13:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084"} {"level":"info","ts":"2026-07-21T13:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"} {"level":"info","ts":"2026-07-21T13:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79"} {"level":"info","ts":"2026-07-21T13:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"} {"level":"info","ts":"2026-07-21T13:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f"} {"level":"info","ts":"2026-07-21T13:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"} {"level":"info","ts":"2026-07-21T13:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"} {"level":"info","ts":"2026-07-21T13:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290"} {"level":"info","ts":"2026-07-21T13:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f"} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f"} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f"} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f"} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f"} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084"} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084"} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084"} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79"} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79"} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79"} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50"} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79"} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50"} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50"} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79"} {"level":"error","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50"} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50"} {"level":"error","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50"} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50"} {"level":"error","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T13:23:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290"} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290"} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290"} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290"} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0"} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290"} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0"} {"level":"error","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e"} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e"} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:23:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e"} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:23:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"} {"level":"info","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e73ca9d9-8a9e-4987-a9d7-615dd7ea30b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38314","PortSpecifier":{"PortValue":38314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e73ca9d9-8a9e-4987-a9d7-615dd7ea30b1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e73ca9d9-8a9e-4987-a9d7-615dd7ea30b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38314","PortSpecifier":{"PortValue":38314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640206,"nanos":466070657},"http":{"id":"e73ca9d9-8a9e-4987-a9d7-615dd7ea30b1","method":"POST","headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e73ca9d9-8a9e-4987-a9d7-615dd7ea30b1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e73ca9d9-8a9e-4987-a9d7-615dd7ea30b1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"]}} {"level":"debug","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e73ca9d9-8a9e-4987-a9d7-615dd7ea30b1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e73ca9d9-8a9e-4987-a9d7-615dd7ea30b1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e73ca9d9-8a9e-4987-a9d7-615dd7ea30b1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e73ca9d9-8a9e-4987-a9d7-615dd7ea30b1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3a013/auth-test-model-b3a013\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3a013/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e73ca9d9-8a9e-4987-a9d7-615dd7ea30b1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e73ca9d9-8a9e-4987-a9d7-615dd7ea30b1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e73ca9d9-8a9e-4987-a9d7-615dd7ea30b1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e73ca9d9-8a9e-4987-a9d7-615dd7ea30b1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e73ca9d9-8a9e-4987-a9d7-615dd7ea30b1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34edfd0c-c7fe-43ca-9aac-5465675c4518","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43158","PortSpecifier":{"PortValue":43158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"34edfd0c-c7fe-43ca-9aac-5465675c4518","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34edfd0c-c7fe-43ca-9aac-5465675c4518","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43158","PortSpecifier":{"PortValue":43158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640206,"nanos":506699265},"http":{"id":"34edfd0c-c7fe-43ca-9aac-5465675c4518","method":"POST","headers":{":authority":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"34edfd0c-c7fe-43ca-9aac-5465675c4518","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"34edfd0c-c7fe-43ca-9aac-5465675c4518","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"]}} {"level":"debug","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"34edfd0c-c7fe-43ca-9aac-5465675c4518","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34edfd0c-c7fe-43ca-9aac-5465675c4518","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34edfd0c-c7fe-43ca-9aac-5465675c4518","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34edfd0c-c7fe-43ca-9aac-5465675c4518","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cfed01/auth-test-model-cfed01\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cfed01/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"34edfd0c-c7fe-43ca-9aac-5465675c4518","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34edfd0c-c7fe-43ca-9aac-5465675c4518","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34edfd0c-c7fe-43ca-9aac-5465675c4518","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34edfd0c-c7fe-43ca-9aac-5465675c4518","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34edfd0c-c7fe-43ca-9aac-5465675c4518","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59899eda-920e-496b-9b20-4e83d6db1200","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38320","PortSpecifier":{"PortValue":38320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"59899eda-920e-496b-9b20-4e83d6db1200","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59899eda-920e-496b-9b20-4e83d6db1200","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38320","PortSpecifier":{"PortValue":38320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640206,"nanos":549570912},"http":{"id":"59899eda-920e-496b-9b20-4e83d6db1200","method":"POST","headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"59899eda-920e-496b-9b20-4e83d6db1200","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AxgYUx8mzspIqm0Q_sa3E4aUKHaq2msdpGOLxFNT5A3efSbp5z5sOZRZZrCD"} {"level":"debug","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"59899eda-920e-496b-9b20-4e83d6db1200","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AxgYUx8mzspIqm0Q_sa3E4aUKHaq2msdpGOLxFNT5A3efSbp5z5sOZRZZrCD\"}"} {"level":"debug","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"59899eda-920e-496b-9b20-4e83d6db1200","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9a087276-8c7b-49b9-9fd1-b2a6c25c683a","keyName":"e2e-auth-iso-a-72ebd0","subscription":"e2e-auth-iso-aa5b0e","tenant":"e2e-shared-a-b3a013","userId":"9a087276-8c7b-49b9-9fd1-b2a6c25c683a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"59899eda-920e-496b-9b20-4e83d6db1200","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59899eda-920e-496b-9b20-4e83d6db1200","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59899eda-920e-496b-9b20-4e83d6db1200","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59899eda-920e-496b-9b20-4e83d6db1200","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3a013/auth-test-model-b3a013\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3a013/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"59899eda-920e-496b-9b20-4e83d6db1200","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59899eda-920e-496b-9b20-4e83d6db1200","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-aa5b0e"} {"level":"debug","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59899eda-920e-496b-9b20-4e83d6db1200","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59899eda-920e-496b-9b20-4e83d6db1200","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59899eda-920e-496b-9b20-4e83d6db1200","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T13:23:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59899eda-920e-496b-9b20-4e83d6db1200","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T13:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"} {"level":"info","ts":"2026-07-21T13:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"} {"level":"info","ts":"2026-07-21T13:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4e9186d834464ee0b9a18b7ff5a1a36d2f218f97c845e855b42f72e5cf2e9f0"} {"level":"info","ts":"2026-07-21T13:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"} {"level":"info","ts":"2026-07-21T13:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ebcd776517a0bc1371c5ac10f6a3d74d3a611b4437daac7a5ad698dae309856c"} {"level":"info","ts":"2026-07-21T13:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"} {"level":"info","ts":"2026-07-21T13:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ecb82d511d20cc7f48e8527c93b6b52749807bd34a49da22b2b02bc68cff133"} {"level":"info","ts":"2026-07-21T13:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d60217d2763a9fd6f49d1b884577f96a7248030db780102bb32895ce3052764a"} {"level":"info","ts":"2026-07-21T13:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46"} {"level":"info","ts":"2026-07-21T13:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa"} {"level":"info","ts":"2026-07-21T13:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e000b7a21eb2aadcbe2c43f3faf279a1882d7f5bf77a721e0353ce674ce4368e"} {"level":"info","ts":"2026-07-21T13:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4501685eb133c6a2927062332b6aa21311fb1da9a31d96ba9a752846e95cda4f"} {"level":"info","ts":"2026-07-21T13:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20849cd34f0b93b99e25d995975de299f44de1fa54394eaf558e7ceeed06da50"} {"level":"info","ts":"2026-07-21T13:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/551c925ac89fb35366ef6099c94a8fcd1ec3c064e6e1b41bf2234b669d237b6f"} {"level":"info","ts":"2026-07-21T13:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ca7d007a645a8656f5fc169aeda0b508db60b140fae3c7f1becef4d78da1e12"} {"level":"info","ts":"2026-07-21T13:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/918a85188e118ae9e823560efe7862bea694c3a782fbb1861095789ab8427112"} {"level":"info","ts":"2026-07-21T13:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40618b1e37b79c034c62a083ba99194c286d0bdde050e15b47fc98ffb09cfc79"} {"level":"info","ts":"2026-07-21T13:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/130bea0f9895acea22ebb741c1154aea939229392d3194e51a40bb0dbb19a084"} {"level":"info","ts":"2026-07-21T13:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c144e37b8bdf7e7f8a342916b1b89e847e61d443d5fdf4e5d6b171c8110749d"} {"level":"info","ts":"2026-07-21T13:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a44fbb086d783f5a6852eb5ed5d0392a87bf9b86882bbf8d860fbb56110cdd87"} {"level":"info","ts":"2026-07-21T13:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b2e05c0aa5db573ca46c686256dd47964ec1ebfa3ef3b604d82ef2d254e72c7"} {"level":"info","ts":"2026-07-21T13:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a94a25b3748a388cd5b500465cf1d75f30c6c5ec17ab67c031d9aec520c2290"} {"level":"info","ts":"2026-07-21T13:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"} {"level":"info","ts":"2026-07-21T13:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c788d5a68f7c5433ede846c66e29b3dcf9848d3a347194f5ff8e4048353582e1"} {"level":"debug","ts":"2026-07-21T13:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"} {"level":"debug","ts":"2026-07-21T13:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"} {"level":"debug","ts":"2026-07-21T13:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"} {"level":"debug","ts":"2026-07-21T13:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"} {"level":"debug","ts":"2026-07-21T13:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"} {"level":"debug","ts":"2026-07-21T13:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"} {"level":"debug","ts":"2026-07-21T13:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"} {"level":"debug","ts":"2026-07-21T13:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2"} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2"} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2"} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2"} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2"} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2"} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2"} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e07560cc3bcd6c23407dbb6ef0be66d8134cedf64dc62e9e186787c8ebbbfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2"} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e07560cc3bcd6c23407dbb6ef0be66d8134cedf64dc62e9e186787c8ebbbfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e07560cc3bcd6c23407dbb6ef0be66d8134cedf64dc62e9e186787c8ebbbfe"} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e07560cc3bcd6c23407dbb6ef0be66d8134cedf64dc62e9e186787c8ebbbfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e07560cc3bcd6c23407dbb6ef0be66d8134cedf64dc62e9e186787c8ebbbfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e07560cc3bcd6c23407dbb6ef0be66d8134cedf64dc62e9e186787c8ebbbfe"} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e07560cc3bcd6c23407dbb6ef0be66d8134cedf64dc62e9e186787c8ebbbfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8e07560cc3bcd6c23407dbb6ef0be66d8134cedf64dc62e9e186787c8ebbbfe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e07560cc3bcd6c23407dbb6ef0be66d8134cedf64dc62e9e186787c8ebbbfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e07560cc3bcd6c23407dbb6ef0be66d8134cedf64dc62e9e186787c8ebbbfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8e07560cc3bcd6c23407dbb6ef0be66d8134cedf64dc62e9e186787c8ebbbfe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2"} {"level":"error","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c8e07560cc3bcd6c23407dbb6ef0be66d8134cedf64dc62e9e186787c8ebbbfe","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c8e07560cc3bcd6c23407dbb6ef0be66d8134cedf64dc62e9e186787c8ebbbfe\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e07560cc3bcd6c23407dbb6ef0be66d8134cedf64dc62e9e186787c8ebbbfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e07560cc3bcd6c23407dbb6ef0be66d8134cedf64dc62e9e186787c8ebbbfe"} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e07560cc3bcd6c23407dbb6ef0be66d8134cedf64dc62e9e186787c8ebbbfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e07560cc3bcd6c23407dbb6ef0be66d8134cedf64dc62e9e186787c8ebbbfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8e07560cc3bcd6c23407dbb6ef0be66d8134cedf64dc62e9e186787c8ebbbfe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e07560cc3bcd6c23407dbb6ef0be66d8134cedf64dc62e9e186787c8ebbbfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e07560cc3bcd6c23407dbb6ef0be66d8134cedf64dc62e9e186787c8ebbbfe"} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e07560cc3bcd6c23407dbb6ef0be66d8134cedf64dc62e9e186787c8ebbbfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e07560cc3bcd6c23407dbb6ef0be66d8134cedf64dc62e9e186787c8ebbbfe"} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50ca689d6dc93a23011a19f7083d3b548ce1f527f58c331f4cd5634c5d4af466","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50ca689d6dc93a23011a19f7083d3b548ce1f527f58c331f4cd5634c5d4af466","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50ca689d6dc93a23011a19f7083d3b548ce1f527f58c331f4cd5634c5d4af466"} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50ca689d6dc93a23011a19f7083d3b548ce1f527f58c331f4cd5634c5d4af466","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50ca689d6dc93a23011a19f7083d3b548ce1f527f58c331f4cd5634c5d4af466"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50ca689d6dc93a23011a19f7083d3b548ce1f527f58c331f4cd5634c5d4af466","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50ca689d6dc93a23011a19f7083d3b548ce1f527f58c331f4cd5634c5d4af466","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50ca689d6dc93a23011a19f7083d3b548ce1f527f58c331f4cd5634c5d4af466"} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50ca689d6dc93a23011a19f7083d3b548ce1f527f58c331f4cd5634c5d4af466","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50ca689d6dc93a23011a19f7083d3b548ce1f527f58c331f4cd5634c5d4af466","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50ca689d6dc93a23011a19f7083d3b548ce1f527f58c331f4cd5634c5d4af466"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50ca689d6dc93a23011a19f7083d3b548ce1f527f58c331f4cd5634c5d4af466","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50ca689d6dc93a23011a19f7083d3b548ce1f527f58c331f4cd5634c5d4af466","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50ca689d6dc93a23011a19f7083d3b548ce1f527f58c331f4cd5634c5d4af466","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50ca689d6dc93a23011a19f7083d3b548ce1f527f58c331f4cd5634c5d4af466"} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50ca689d6dc93a23011a19f7083d3b548ce1f527f58c331f4cd5634c5d4af466","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50ca689d6dc93a23011a19f7083d3b548ce1f527f58c331f4cd5634c5d4af466","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50ca689d6dc93a23011a19f7083d3b548ce1f527f58c331f4cd5634c5d4af466"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50ca689d6dc93a23011a19f7083d3b548ce1f527f58c331f4cd5634c5d4af466","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bed875c048b32fbbc85296aa86c688fc8afa155cb3f2f3ba9f2d03cf9458aec8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50ca689d6dc93a23011a19f7083d3b548ce1f527f58c331f4cd5634c5d4af466"} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bed875c048b32fbbc85296aa86c688fc8afa155cb3f2f3ba9f2d03cf9458aec8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bed875c048b32fbbc85296aa86c688fc8afa155cb3f2f3ba9f2d03cf9458aec8"} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50ca689d6dc93a23011a19f7083d3b548ce1f527f58c331f4cd5634c5d4af466","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bed875c048b32fbbc85296aa86c688fc8afa155cb3f2f3ba9f2d03cf9458aec8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bed875c048b32fbbc85296aa86c688fc8afa155cb3f2f3ba9f2d03cf9458aec8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bed875c048b32fbbc85296aa86c688fc8afa155cb3f2f3ba9f2d03cf9458aec8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bed875c048b32fbbc85296aa86c688fc8afa155cb3f2f3ba9f2d03cf9458aec8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50ca689d6dc93a23011a19f7083d3b548ce1f527f58c331f4cd5634c5d4af466"} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bed875c048b32fbbc85296aa86c688fc8afa155cb3f2f3ba9f2d03cf9458aec8"} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27a11b35b3d96be1197fff6a5984a9250370ac75ad0f00b4728e454f3447dde7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27a11b35b3d96be1197fff6a5984a9250370ac75ad0f00b4728e454f3447dde7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3f548c749ff48a75a270126c5916a013d9c3060c2e9bac773f8163f3889aea8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27a11b35b3d96be1197fff6a5984a9250370ac75ad0f00b4728e454f3447dde7"} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3f548c749ff48a75a270126c5916a013d9c3060c2e9bac773f8163f3889aea8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27a11b35b3d96be1197fff6a5984a9250370ac75ad0f00b4728e454f3447dde7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27a11b35b3d96be1197fff6a5984a9250370ac75ad0f00b4728e454f3447dde7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3f548c749ff48a75a270126c5916a013d9c3060c2e9bac773f8163f3889aea8"} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27a11b35b3d96be1197fff6a5984a9250370ac75ad0f00b4728e454f3447dde7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3f548c749ff48a75a270126c5916a013d9c3060c2e9bac773f8163f3889aea8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3f548c749ff48a75a270126c5916a013d9c3060c2e9bac773f8163f3889aea8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3f548c749ff48a75a270126c5916a013d9c3060c2e9bac773f8163f3889aea8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27a11b35b3d96be1197fff6a5984a9250370ac75ad0f00b4728e454f3447dde7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27a11b35b3d96be1197fff6a5984a9250370ac75ad0f00b4728e454f3447dde7"} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27a11b35b3d96be1197fff6a5984a9250370ac75ad0f00b4728e454f3447dde7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3f548c749ff48a75a270126c5916a013d9c3060c2e9bac773f8163f3889aea8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3f548c749ff48a75a270126c5916a013d9c3060c2e9bac773f8163f3889aea8"} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3f548c749ff48a75a270126c5916a013d9c3060c2e9bac773f8163f3889aea8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27a11b35b3d96be1197fff6a5984a9250370ac75ad0f00b4728e454f3447dde7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3f548c749ff48a75a270126c5916a013d9c3060c2e9bac773f8163f3889aea8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3f548c749ff48a75a270126c5916a013d9c3060c2e9bac773f8163f3889aea8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3f548c749ff48a75a270126c5916a013d9c3060c2e9bac773f8163f3889aea8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27a11b35b3d96be1197fff6a5984a9250370ac75ad0f00b4728e454f3447dde7"} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27a11b35b3d96be1197fff6a5984a9250370ac75ad0f00b4728e454f3447dde7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27a11b35b3d96be1197fff6a5984a9250370ac75ad0f00b4728e454f3447dde7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3f548c749ff48a75a270126c5916a013d9c3060c2e9bac773f8163f3889aea8"} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27a11b35b3d96be1197fff6a5984a9250370ac75ad0f00b4728e454f3447dde7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3f548c749ff48a75a270126c5916a013d9c3060c2e9bac773f8163f3889aea8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27a11b35b3d96be1197fff6a5984a9250370ac75ad0f00b4728e454f3447dde7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46"} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27a11b35b3d96be1197fff6a5984a9250370ac75ad0f00b4728e454f3447dde7"} {"level":"error","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46"} {"level":"error","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0938a3c2ce635927bd8e5d05eaae101dfbe2b1ca19eb23babc983c94018c4363","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46"} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0938a3c2ce635927bd8e5d05eaae101dfbe2b1ca19eb23babc983c94018c4363","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0938a3c2ce635927bd8e5d05eaae101dfbe2b1ca19eb23babc983c94018c4363"} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0938a3c2ce635927bd8e5d05eaae101dfbe2b1ca19eb23babc983c94018c4363","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0938a3c2ce635927bd8e5d05eaae101dfbe2b1ca19eb23babc983c94018c4363"} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46"} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0938a3c2ce635927bd8e5d05eaae101dfbe2b1ca19eb23babc983c94018c4363","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0938a3c2ce635927bd8e5d05eaae101dfbe2b1ca19eb23babc983c94018c4363","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0938a3c2ce635927bd8e5d05eaae101dfbe2b1ca19eb23babc983c94018c4363","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0938a3c2ce635927bd8e5d05eaae101dfbe2b1ca19eb23babc983c94018c4363"} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0938a3c2ce635927bd8e5d05eaae101dfbe2b1ca19eb23babc983c94018c4363","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0938a3c2ce635927bd8e5d05eaae101dfbe2b1ca19eb23babc983c94018c4363"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0938a3c2ce635927bd8e5d05eaae101dfbe2b1ca19eb23babc983c94018c4363","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0938a3c2ce635927bd8e5d05eaae101dfbe2b1ca19eb23babc983c94018c4363","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0938a3c2ce635927bd8e5d05eaae101dfbe2b1ca19eb23babc983c94018c4363"} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0938a3c2ce635927bd8e5d05eaae101dfbe2b1ca19eb23babc983c94018c4363","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0938a3c2ce635927bd8e5d05eaae101dfbe2b1ca19eb23babc983c94018c4363","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0938a3c2ce635927bd8e5d05eaae101dfbe2b1ca19eb23babc983c94018c4363","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0938a3c2ce635927bd8e5d05eaae101dfbe2b1ca19eb23babc983c94018c4363"} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8db21d5afa73dbad87048b4c164d8704515d0c36af8e7fba6d5cdb3b7064e89c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8db21d5afa73dbad87048b4c164d8704515d0c36af8e7fba6d5cdb3b7064e89c"} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8db21d5afa73dbad87048b4c164d8704515d0c36af8e7fba6d5cdb3b7064e89c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0938a3c2ce635927bd8e5d05eaae101dfbe2b1ca19eb23babc983c94018c4363","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0938a3c2ce635927bd8e5d05eaae101dfbe2b1ca19eb23babc983c94018c4363"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa"} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0938a3c2ce635927bd8e5d05eaae101dfbe2b1ca19eb23babc983c94018c4363","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8db21d5afa73dbad87048b4c164d8704515d0c36af8e7fba6d5cdb3b7064e89c"} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46e4e1303d72ebd35e833aafe8ab58ab27d9a79d01e565f66e5d2793671949d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46e4e1303d72ebd35e833aafe8ab58ab27d9a79d01e565f66e5d2793671949d3"} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46e4e1303d72ebd35e833aafe8ab58ab27d9a79d01e565f66e5d2793671949d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8db21d5afa73dbad87048b4c164d8704515d0c36af8e7fba6d5cdb3b7064e89c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8db21d5afa73dbad87048b4c164d8704515d0c36af8e7fba6d5cdb3b7064e89c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8db21d5afa73dbad87048b4c164d8704515d0c36af8e7fba6d5cdb3b7064e89c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0938a3c2ce635927bd8e5d05eaae101dfbe2b1ca19eb23babc983c94018c4363"} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0938a3c2ce635927bd8e5d05eaae101dfbe2b1ca19eb23babc983c94018c4363","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa"} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8350da87b7289f9c8c4a2ea1f796fdf0b837afc4ffd7efae52ede112ee4708c"} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8350da87b7289f9c8c4a2ea1f796fdf0b837afc4ffd7efae52ede112ee4708c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8350da87b7289f9c8c4a2ea1f796fdf0b837afc4ffd7efae52ede112ee4708c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46e4e1303d72ebd35e833aafe8ab58ab27d9a79d01e565f66e5d2793671949d3"} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b4c767933b0cf598d395355ecca1770af6d6f5391c14476354d75c987590837"} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8db21d5afa73dbad87048b4c164d8704515d0c36af8e7fba6d5cdb3b7064e89c"} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8350da87b7289f9c8c4a2ea1f796fdf0b837afc4ffd7efae52ede112ee4708c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46e4e1303d72ebd35e833aafe8ab58ab27d9a79d01e565f66e5d2793671949d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46e4e1303d72ebd35e833aafe8ab58ab27d9a79d01e565f66e5d2793671949d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9d77e706cc8de9bdb83df2a61423137024bf3532be08dd46304367b9bc142cb"} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d60217d2763a9fd6f49d1b884577f96a7248030db780102bb32895ce3052764a"} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46e4e1303d72ebd35e833aafe8ab58ab27d9a79d01e565f66e5d2793671949d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b4c767933b0cf598d395355ecca1770af6d6f5391c14476354d75c987590837","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b4c767933b0cf598d395355ecca1770af6d6f5391c14476354d75c987590837"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20d94318eb52e1ad64f2a72879770d976d7a2861e6703cd7351b9c5c1878f8b2"} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c09b4ec1d67c8c1ebfff2190725c391216e90a9da7f0e415e638d3b71eb2bbc1"} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b4c767933b0cf598d395355ecca1770af6d6f5391c14476354d75c987590837","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8db21d5afa73dbad87048b4c164d8704515d0c36af8e7fba6d5cdb3b7064e89c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9d77e706cc8de9bdb83df2a61423137024bf3532be08dd46304367b9bc142cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9d77e706cc8de9bdb83df2a61423137024bf3532be08dd46304367b9bc142cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff27434938c3eb02ce27cad17b10cc508f192fe072ad9ff0824c8f29513e235d"} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9d77e706cc8de9bdb83df2a61423137024bf3532be08dd46304367b9bc142cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d60217d2763a9fd6f49d1b884577f96a7248030db780102bb32895ce3052764a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d60217d2763a9fd6f49d1b884577f96a7248030db780102bb32895ce3052764a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d60217d2763a9fd6f49d1b884577f96a7248030db780102bb32895ce3052764a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20d94318eb52e1ad64f2a72879770d976d7a2861e6703cd7351b9c5c1878f8b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20d94318eb52e1ad64f2a72879770d976d7a2861e6703cd7351b9c5c1878f8b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22e03c00e4311fcd65a1a5464e4a5761b626d083ead41973d16fd331b7a72b90"} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8350da87b7289f9c8c4a2ea1f796fdf0b837afc4ffd7efae52ede112ee4708c"} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20d94318eb52e1ad64f2a72879770d976d7a2861e6703cd7351b9c5c1878f8b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c09b4ec1d67c8c1ebfff2190725c391216e90a9da7f0e415e638d3b71eb2bbc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c09b4ec1d67c8c1ebfff2190725c391216e90a9da7f0e415e638d3b71eb2bbc1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46e4e1303d72ebd35e833aafe8ab58ab27d9a79d01e565f66e5d2793671949d3"} {"level":"info","ts":"2026-07-21T13:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b4c767933b0cf598d395355ecca1770af6d6f5391c14476354d75c987590837"} {"level":"info","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9d77e706cc8de9bdb83df2a61423137024bf3532be08dd46304367b9bc142cb"} {"level":"info","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c09b4ec1d67c8c1ebfff2190725c391216e90a9da7f0e415e638d3b71eb2bbc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff27434938c3eb02ce27cad17b10cc508f192fe072ad9ff0824c8f29513e235d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff27434938c3eb02ce27cad17b10cc508f192fe072ad9ff0824c8f29513e235d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d60217d2763a9fd6f49d1b884577f96a7248030db780102bb32895ce3052764a"} {"level":"info","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20d94318eb52e1ad64f2a72879770d976d7a2861e6703cd7351b9c5c1878f8b2"} {"level":"info","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff27434938c3eb02ce27cad17b10cc508f192fe072ad9ff0824c8f29513e235d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22e03c00e4311fcd65a1a5464e4a5761b626d083ead41973d16fd331b7a72b90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22e03c00e4311fcd65a1a5464e4a5761b626d083ead41973d16fd331b7a72b90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c09b4ec1d67c8c1ebfff2190725c391216e90a9da7f0e415e638d3b71eb2bbc1"} {"level":"info","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff27434938c3eb02ce27cad17b10cc508f192fe072ad9ff0824c8f29513e235d"} {"level":"info","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22e03c00e4311fcd65a1a5464e4a5761b626d083ead41973d16fd331b7a72b90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8350da87b7289f9c8c4a2ea1f796fdf0b837afc4ffd7efae52ede112ee4708c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46e4e1303d72ebd35e833aafe8ab58ab27d9a79d01e565f66e5d2793671949d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b4c767933b0cf598d395355ecca1770af6d6f5391c14476354d75c987590837","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9d77e706cc8de9bdb83df2a61423137024bf3532be08dd46304367b9bc142cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d60217d2763a9fd6f49d1b884577f96a7248030db780102bb32895ce3052764a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20d94318eb52e1ad64f2a72879770d976d7a2861e6703cd7351b9c5c1878f8b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c09b4ec1d67c8c1ebfff2190725c391216e90a9da7f0e415e638d3b71eb2bbc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff27434938c3eb02ce27cad17b10cc508f192fe072ad9ff0824c8f29513e235d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22e03c00e4311fcd65a1a5464e4a5761b626d083ead41973d16fd331b7a72b90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22e03c00e4311fcd65a1a5464e4a5761b626d083ead41973d16fd331b7a72b90"} {"level":"info","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22e03c00e4311fcd65a1a5464e4a5761b626d083ead41973d16fd331b7a72b90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22e03c00e4311fcd65a1a5464e4a5761b626d083ead41973d16fd331b7a72b90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22e03c00e4311fcd65a1a5464e4a5761b626d083ead41973d16fd331b7a72b90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22e03c00e4311fcd65a1a5464e4a5761b626d083ead41973d16fd331b7a72b90"} {"level":"debug","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22e03c00e4311fcd65a1a5464e4a5761b626d083ead41973d16fd331b7a72b90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22e03c00e4311fcd65a1a5464e4a5761b626d083ead41973d16fd331b7a72b90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22e03c00e4311fcd65a1a5464e4a5761b626d083ead41973d16fd331b7a72b90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22e03c00e4311fcd65a1a5464e4a5761b626d083ead41973d16fd331b7a72b90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:24:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:24:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22e03c00e4311fcd65a1a5464e4a5761b626d083ead41973d16fd331b7a72b90"} {"level":"info","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22e03c00e4311fcd65a1a5464e4a5761b626d083ead41973d16fd331b7a72b90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22e03c00e4311fcd65a1a5464e4a5761b626d083ead41973d16fd331b7a72b90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22e03c00e4311fcd65a1a5464e4a5761b626d083ead41973d16fd331b7a72b90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22e03c00e4311fcd65a1a5464e4a5761b626d083ead41973d16fd331b7a72b90"} {"level":"info","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22e03c00e4311fcd65a1a5464e4a5761b626d083ead41973d16fd331b7a72b90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22e03c00e4311fcd65a1a5464e4a5761b626d083ead41973d16fd331b7a72b90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:24:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:24:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22e03c00e4311fcd65a1a5464e4a5761b626d083ead41973d16fd331b7a72b90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22e03c00e4311fcd65a1a5464e4a5761b626d083ead41973d16fd331b7a72b90"} {"level":"error","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"22e03c00e4311fcd65a1a5464e4a5761b626d083ead41973d16fd331b7a72b90","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"22e03c00e4311fcd65a1a5464e4a5761b626d083ead41973d16fd331b7a72b90\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22e03c00e4311fcd65a1a5464e4a5761b626d083ead41973d16fd331b7a72b90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22e03c00e4311fcd65a1a5464e4a5761b626d083ead41973d16fd331b7a72b90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33d064ad-787f-4c01-8136-a7abc1bd31a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43562","PortSpecifier":{"PortValue":43562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33d064ad-787f-4c01-8136-a7abc1bd31a2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33d064ad-787f-4c01-8136-a7abc1bd31a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43562","PortSpecifier":{"PortValue":43562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640281,"nanos":136068092},"http":{"id":"33d064ad-787f-4c01-8136-a7abc1bd31a2","method":"POST","headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"33d064ad-787f-4c01-8136-a7abc1bd31a2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33d064ad-787f-4c01-8136-a7abc1bd31a2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"]}} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33d064ad-787f-4c01-8136-a7abc1bd31a2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33d064ad-787f-4c01-8136-a7abc1bd31a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33d064ad-787f-4c01-8136-a7abc1bd31a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33d064ad-787f-4c01-8136-a7abc1bd31a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3a013/sub-test-model-b3a013\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3a013/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"33d064ad-787f-4c01-8136-a7abc1bd31a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33d064ad-787f-4c01-8136-a7abc1bd31a2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33d064ad-787f-4c01-8136-a7abc1bd31a2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33d064ad-787f-4c01-8136-a7abc1bd31a2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33d064ad-787f-4c01-8136-a7abc1bd31a2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8e10a53-c8b2-4323-aeee-cecc6301d719","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42188","PortSpecifier":{"PortValue":42188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b8e10a53-c8b2-4323-aeee-cecc6301d719","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8e10a53-c8b2-4323-aeee-cecc6301d719","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42188","PortSpecifier":{"PortValue":42188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640281,"nanos":177999083},"http":{"id":"b8e10a53-c8b2-4323-aeee-cecc6301d719","method":"POST","headers":{":authority":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b8e10a53-c8b2-4323-aeee-cecc6301d719","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b8e10a53-c8b2-4323-aeee-cecc6301d719","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"]}} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b8e10a53-c8b2-4323-aeee-cecc6301d719","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8e10a53-c8b2-4323-aeee-cecc6301d719","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8e10a53-c8b2-4323-aeee-cecc6301d719","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8e10a53-c8b2-4323-aeee-cecc6301d719","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cfed01/sub-test-model-cfed01\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cfed01/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b8e10a53-c8b2-4323-aeee-cecc6301d719","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8e10a53-c8b2-4323-aeee-cecc6301d719","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8e10a53-c8b2-4323-aeee-cecc6301d719","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8e10a53-c8b2-4323-aeee-cecc6301d719","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8e10a53-c8b2-4323-aeee-cecc6301d719","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45deba3c-9ff0-4882-a40a-2c640feea1ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43572","PortSpecifier":{"PortValue":43572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"45deba3c-9ff0-4882-a40a-2c640feea1ec","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45deba3c-9ff0-4882-a40a-2c640feea1ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43572","PortSpecifier":{"PortValue":43572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640281,"nanos":221199791},"http":{"id":"45deba3c-9ff0-4882-a40a-2c640feea1ec","method":"GET","headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"45deba3c-9ff0-4882-a40a-2c640feea1ec","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15PA6qR3vWDWT1vp2_JAL18IYLExoHycYPzk6LLusqVEUQAabVgkwhVpZD3JE"} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"45deba3c-9ff0-4882-a40a-2c640feea1ec","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15PA6qR3vWDWT1vp2_JAL18IYLExoHycYPzk6LLusqVEUQAabVgkwhVpZD3JE\"}"} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"45deba3c-9ff0-4882-a40a-2c640feea1ec","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"22dd9950-6f8f-4cd5-8239-b47042d5bb70","keyName":"e2e-sub-iso-55e490","subscription":"e2e-a-only-8fd4ce","tenant":"e2e-shared-a-b3a013","userId":"22dd9950-6f8f-4cd5-8239-b47042d5bb70","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"45deba3c-9ff0-4882-a40a-2c640feea1ec","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45deba3c-9ff0-4882-a40a-2c640feea1ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45deba3c-9ff0-4882-a40a-2c640feea1ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45deba3c-9ff0-4882-a40a-2c640feea1ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3a013/sub-test-model-b3a013\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3a013/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45deba3c-9ff0-4882-a40a-2c640feea1ec","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-8fd4ce"} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45deba3c-9ff0-4882-a40a-2c640feea1ec","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45deba3c-9ff0-4882-a40a-2c640feea1ec","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"45deba3c-9ff0-4882-a40a-2c640feea1ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45deba3c-9ff0-4882-a40a-2c640feea1ec","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45deba3c-9ff0-4882-a40a-2c640feea1ec","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a5d9dbc-f383-4291-b7bb-b4604ec8bfff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42194","PortSpecifier":{"PortValue":42194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7a5d9dbc-f383-4291-b7bb-b4604ec8bfff","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a5d9dbc-f383-4291-b7bb-b4604ec8bfff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42194","PortSpecifier":{"PortValue":42194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640281,"nanos":265233109},"http":{"id":"7a5d9dbc-f383-4291-b7bb-b4604ec8bfff","method":"GET","headers":{":authority":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7a5d9dbc-f383-4291-b7bb-b4604ec8bfff","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JZCvg9eswykSe5Se_TGK3IrazYAGKuPK3F8BRib9mVhFowZ2UHnZ6UmQh7tW"} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7a5d9dbc-f383-4291-b7bb-b4604ec8bfff","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-cfed01.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JZCvg9eswykSe5Se_TGK3IrazYAGKuPK3F8BRib9mVhFowZ2UHnZ6UmQh7tW\"}"} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7a5d9dbc-f383-4291-b7bb-b4604ec8bfff","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-cfed01.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0d6d4291-ae45-4a9b-9f74-68c0bd13679b","keyName":"e2e-sub-iso-b04528","subscription":"e2e-b-only-8fd4ce","tenant":"e2e-shared-b-cfed01","userId":"0d6d4291-ae45-4a9b-9f74-68c0bd13679b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7a5d9dbc-f383-4291-b7bb-b4604ec8bfff","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a5d9dbc-f383-4291-b7bb-b4604ec8bfff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a5d9dbc-f383-4291-b7bb-b4604ec8bfff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a5d9dbc-f383-4291-b7bb-b4604ec8bfff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cfed01/sub-test-model-cfed01\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cfed01/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7a5d9dbc-f383-4291-b7bb-b4604ec8bfff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a5d9dbc-f383-4291-b7bb-b4604ec8bfff","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a5d9dbc-f383-4291-b7bb-b4604ec8bfff","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a5d9dbc-f383-4291-b7bb-b4604ec8bfff","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-8fd4ce"} {"level":"info","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a5d9dbc-f383-4291-b7bb-b4604ec8bfff","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T13:24:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a5d9dbc-f383-4291-b7bb-b4604ec8bfff","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f27ffe2c-b6ef-4ea5-9d18-c5a2ebd6ad67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37606","PortSpecifier":{"PortValue":37606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f27ffe2c-b6ef-4ea5-9d18-c5a2ebd6ad67","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f27ffe2c-b6ef-4ea5-9d18-c5a2ebd6ad67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37606","PortSpecifier":{"PortValue":37606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640289,"nanos":400920144},"http":{"id":"f27ffe2c-b6ef-4ea5-9d18-c5a2ebd6ad67","method":"POST","headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f27ffe2c-b6ef-4ea5-9d18-c5a2ebd6ad67","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f27ffe2c-b6ef-4ea5-9d18-c5a2ebd6ad67","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"]}} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f27ffe2c-b6ef-4ea5-9d18-c5a2ebd6ad67","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f27ffe2c-b6ef-4ea5-9d18-c5a2ebd6ad67","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f27ffe2c-b6ef-4ea5-9d18-c5a2ebd6ad67","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f27ffe2c-b6ef-4ea5-9d18-c5a2ebd6ad67","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3a013/sub-test-model-b3a013\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3a013/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f27ffe2c-b6ef-4ea5-9d18-c5a2ebd6ad67","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f27ffe2c-b6ef-4ea5-9d18-c5a2ebd6ad67","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f27ffe2c-b6ef-4ea5-9d18-c5a2ebd6ad67","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f27ffe2c-b6ef-4ea5-9d18-c5a2ebd6ad67","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f27ffe2c-b6ef-4ea5-9d18-c5a2ebd6ad67","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f679cb7b-7186-49e3-873f-1d7ca89f0d09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33584","PortSpecifier":{"PortValue":33584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f679cb7b-7186-49e3-873f-1d7ca89f0d09","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f679cb7b-7186-49e3-873f-1d7ca89f0d09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33584","PortSpecifier":{"PortValue":33584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640289,"nanos":439223419},"http":{"id":"f679cb7b-7186-49e3-873f-1d7ca89f0d09","method":"POST","headers":{":authority":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f679cb7b-7186-49e3-873f-1d7ca89f0d09","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f679cb7b-7186-49e3-873f-1d7ca89f0d09","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"]}} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f679cb7b-7186-49e3-873f-1d7ca89f0d09","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f679cb7b-7186-49e3-873f-1d7ca89f0d09","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f679cb7b-7186-49e3-873f-1d7ca89f0d09","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f679cb7b-7186-49e3-873f-1d7ca89f0d09","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cfed01/sub-test-model-cfed01\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cfed01/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f679cb7b-7186-49e3-873f-1d7ca89f0d09","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f679cb7b-7186-49e3-873f-1d7ca89f0d09","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f679cb7b-7186-49e3-873f-1d7ca89f0d09","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f679cb7b-7186-49e3-873f-1d7ca89f0d09","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f679cb7b-7186-49e3-873f-1d7ca89f0d09","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80f93264-cd12-4f60-86ca-5e40c9551650","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37610","PortSpecifier":{"PortValue":37610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"80f93264-cd12-4f60-86ca-5e40c9551650","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80f93264-cd12-4f60-86ca-5e40c9551650","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37610","PortSpecifier":{"PortValue":37610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640289,"nanos":475431767},"http":{"id":"80f93264-cd12-4f60-86ca-5e40c9551650","method":"POST","headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"80f93264-cd12-4f60-86ca-5e40c9551650","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-7lQninplYodQKxuX_UAupMivp3TrrG8Slw5mTagPaOYFyZzMlHT5Bhku0mj3"} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"80f93264-cd12-4f60-86ca-5e40c9551650","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-7lQninplYodQKxuX_UAupMivp3TrrG8Slw5mTagPaOYFyZzMlHT5Bhku0mj3\"}"} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"80f93264-cd12-4f60-86ca-5e40c9551650","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f8e4eb3d-bc98-4720-ba72-78ec01b6c4cf","keyName":"e2e-sub-iso-66e360","subscription":"e2e-shared-sub-ed5d76","tenant":"e2e-shared-a-b3a013","userId":"f8e4eb3d-bc98-4720-ba72-78ec01b6c4cf","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"80f93264-cd12-4f60-86ca-5e40c9551650","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80f93264-cd12-4f60-86ca-5e40c9551650","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80f93264-cd12-4f60-86ca-5e40c9551650","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80f93264-cd12-4f60-86ca-5e40c9551650","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3a013/sub-test-model-b3a013\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3a013/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80f93264-cd12-4f60-86ca-5e40c9551650","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80f93264-cd12-4f60-86ca-5e40c9551650","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"80f93264-cd12-4f60-86ca-5e40c9551650","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80f93264-cd12-4f60-86ca-5e40c9551650","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-ed5d76"} {"level":"info","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80f93264-cd12-4f60-86ca-5e40c9551650","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80f93264-cd12-4f60-86ca-5e40c9551650","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33a5f55d-06c0-4fe1-9054-4aad01ae5504","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33592","PortSpecifier":{"PortValue":33592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33a5f55d-06c0-4fe1-9054-4aad01ae5504","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33a5f55d-06c0-4fe1-9054-4aad01ae5504","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33592","PortSpecifier":{"PortValue":33592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640289,"nanos":505837381},"http":{"id":"33a5f55d-06c0-4fe1-9054-4aad01ae5504","method":"POST","headers":{":authority":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33a5f55d-06c0-4fe1-9054-4aad01ae5504","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-188XAggx2frSpniJg_u0XQKCFNG8BNRxeMFani1Ijh6ceTqL4reYLS7tJqN4X"} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"33a5f55d-06c0-4fe1-9054-4aad01ae5504","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-cfed01.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-188XAggx2frSpniJg_u0XQKCFNG8BNRxeMFani1Ijh6ceTqL4reYLS7tJqN4X\"}"} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"33a5f55d-06c0-4fe1-9054-4aad01ae5504","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-cfed01.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b6ab1806-260c-4216-ae5e-8790186d163a","keyName":"e2e-sub-iso-44932e","subscription":"e2e-shared-sub-ed5d76","tenant":"e2e-shared-b-cfed01","userId":"b6ab1806-260c-4216-ae5e-8790186d163a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33a5f55d-06c0-4fe1-9054-4aad01ae5504","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33a5f55d-06c0-4fe1-9054-4aad01ae5504","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33a5f55d-06c0-4fe1-9054-4aad01ae5504","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33a5f55d-06c0-4fe1-9054-4aad01ae5504","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cfed01/sub-test-model-cfed01\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cfed01/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"33a5f55d-06c0-4fe1-9054-4aad01ae5504","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33a5f55d-06c0-4fe1-9054-4aad01ae5504","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33a5f55d-06c0-4fe1-9054-4aad01ae5504","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-ed5d76"} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33a5f55d-06c0-4fe1-9054-4aad01ae5504","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33a5f55d-06c0-4fe1-9054-4aad01ae5504","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33a5f55d-06c0-4fe1-9054-4aad01ae5504","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T13:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8e07560cc3bcd6c23407dbb6ef0be66d8134cedf64dc62e9e186787c8ebbbfe"} {"level":"info","ts":"2026-07-21T13:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bed875c048b32fbbc85296aa86c688fc8afa155cb3f2f3ba9f2d03cf9458aec8"} {"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"} {"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2"} {"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"} {"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"} {"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27a11b35b3d96be1197fff6a5984a9250370ac75ad0f00b4728e454f3447dde7"} {"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d60217d2763a9fd6f49d1b884577f96a7248030db780102bb32895ce3052764a"} {"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46e4e1303d72ebd35e833aafe8ab58ab27d9a79d01e565f66e5d2793671949d3"} {"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0938a3c2ce635927bd8e5d05eaae101dfbe2b1ca19eb23babc983c94018c4363"} {"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50ca689d6dc93a23011a19f7083d3b548ce1f527f58c331f4cd5634c5d4af466"} {"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c09b4ec1d67c8c1ebfff2190725c391216e90a9da7f0e415e638d3b71eb2bbc1"} {"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22e03c00e4311fcd65a1a5464e4a5761b626d083ead41973d16fd331b7a72b90"} {"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8db21d5afa73dbad87048b4c164d8704515d0c36af8e7fba6d5cdb3b7064e89c"} {"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"} {"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8350da87b7289f9c8c4a2ea1f796fdf0b837afc4ffd7efae52ede112ee4708c"} {"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3f548c749ff48a75a270126c5916a013d9c3060c2e9bac773f8163f3889aea8"} {"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20d94318eb52e1ad64f2a72879770d976d7a2861e6703cd7351b9c5c1878f8b2"} {"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9d77e706cc8de9bdb83df2a61423137024bf3532be08dd46304367b9bc142cb"} {"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa"} {"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff27434938c3eb02ce27cad17b10cc508f192fe072ad9ff0824c8f29513e235d"} {"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b4c767933b0cf598d395355ecca1770af6d6f5391c14476354d75c987590837"} {"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"} {"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46"} {"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa"} {"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa"} {"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa"} {"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa"} {"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa"} {"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa"} {"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa"} {"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07fd17709eb375450d56096a9e90787f63bc96c326647c2fb3009a2e9b6e48a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07fd17709eb375450d56096a9e90787f63bc96c326647c2fb3009a2e9b6e48a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07fd17709eb375450d56096a9e90787f63bc96c326647c2fb3009a2e9b6e48a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07fd17709eb375450d56096a9e90787f63bc96c326647c2fb3009a2e9b6e48a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07fd17709eb375450d56096a9e90787f63bc96c326647c2fb3009a2e9b6e48a9"} {"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07fd17709eb375450d56096a9e90787f63bc96c326647c2fb3009a2e9b6e48a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07fd17709eb375450d56096a9e90787f63bc96c326647c2fb3009a2e9b6e48a9"} {"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07fd17709eb375450d56096a9e90787f63bc96c326647c2fb3009a2e9b6e48a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07fd17709eb375450d56096a9e90787f63bc96c326647c2fb3009a2e9b6e48a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07fd17709eb375450d56096a9e90787f63bc96c326647c2fb3009a2e9b6e48a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07fd17709eb375450d56096a9e90787f63bc96c326647c2fb3009a2e9b6e48a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07fd17709eb375450d56096a9e90787f63bc96c326647c2fb3009a2e9b6e48a9"} {"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"} {"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702"} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702"} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a8435c24bf8c653822d25061a36e86648e6e54b372ca78e6763ffe38882fe26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a8435c24bf8c653822d25061a36e86648e6e54b372ca78e6763ffe38882fe26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702"} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a8435c24bf8c653822d25061a36e86648e6e54b372ca78e6763ffe38882fe26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a8435c24bf8c653822d25061a36e86648e6e54b372ca78e6763ffe38882fe26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a8435c24bf8c653822d25061a36e86648e6e54b372ca78e6763ffe38882fe26"} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a8435c24bf8c653822d25061a36e86648e6e54b372ca78e6763ffe38882fe26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a8435c24bf8c653822d25061a36e86648e6e54b372ca78e6763ffe38882fe26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a8435c24bf8c653822d25061a36e86648e6e54b372ca78e6763ffe38882fe26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a8435c24bf8c653822d25061a36e86648e6e54b372ca78e6763ffe38882fe26","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702"} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a8435c24bf8c653822d25061a36e86648e6e54b372ca78e6763ffe38882fe26"} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702"} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88"} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702"} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88"} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d74ef885df16963e63f4ad0ac0a99c5236d4449f970855ad66d454db56567a82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702"} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d74ef885df16963e63f4ad0ac0a99c5236d4449f970855ad66d454db56567a82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e41a0843ef7dfee096d7ea81a6978fdedce94347e4dca232572baae380f5e9ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d74ef885df16963e63f4ad0ac0a99c5236d4449f970855ad66d454db56567a82"} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e41a0843ef7dfee096d7ea81a6978fdedce94347e4dca232572baae380f5e9ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d74ef885df16963e63f4ad0ac0a99c5236d4449f970855ad66d454db56567a82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d74ef885df16963e63f4ad0ac0a99c5236d4449f970855ad66d454db56567a82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d74ef885df16963e63f4ad0ac0a99c5236d4449f970855ad66d454db56567a82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88"} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e41a0843ef7dfee096d7ea81a6978fdedce94347e4dca232572baae380f5e9ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e41a0843ef7dfee096d7ea81a6978fdedce94347e4dca232572baae380f5e9ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e41a0843ef7dfee096d7ea81a6978fdedce94347e4dca232572baae380f5e9ca"} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d74ef885df16963e63f4ad0ac0a99c5236d4449f970855ad66d454db56567a82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702"} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e41a0843ef7dfee096d7ea81a6978fdedce94347e4dca232572baae380f5e9ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e41a0843ef7dfee096d7ea81a6978fdedce94347e4dca232572baae380f5e9ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d74ef885df16963e63f4ad0ac0a99c5236d4449f970855ad66d454db56567a82"} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e41a0843ef7dfee096d7ea81a6978fdedce94347e4dca232572baae380f5e9ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e41a0843ef7dfee096d7ea81a6978fdedce94347e4dca232572baae380f5e9ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41ee940bbd3e821e467cfc3e59f7736c86c46b706e18bb80ea83a997b046411d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88"} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41ee940bbd3e821e467cfc3e59f7736c86c46b706e18bb80ea83a997b046411d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e41a0843ef7dfee096d7ea81a6978fdedce94347e4dca232572baae380f5e9ca"} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e64149d493063174b44efb91b8c4aa04cc8f3180aa96a54c02f10eecb4a25d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41ee940bbd3e821e467cfc3e59f7736c86c46b706e18bb80ea83a997b046411d"} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e64149d493063174b44efb91b8c4aa04cc8f3180aa96a54c02f10eecb4a25d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41ee940bbd3e821e467cfc3e59f7736c86c46b706e18bb80ea83a997b046411d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41ee940bbd3e821e467cfc3e59f7736c86c46b706e18bb80ea83a997b046411d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41ee940bbd3e821e467cfc3e59f7736c86c46b706e18bb80ea83a997b046411d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e64149d493063174b44efb91b8c4aa04cc8f3180aa96a54c02f10eecb4a25d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e64149d493063174b44efb91b8c4aa04cc8f3180aa96a54c02f10eecb4a25d3"} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e64149d493063174b44efb91b8c4aa04cc8f3180aa96a54c02f10eecb4a25d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41ee940bbd3e821e467cfc3e59f7736c86c46b706e18bb80ea83a997b046411d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41ee940bbd3e821e467cfc3e59f7736c86c46b706e18bb80ea83a997b046411d"} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41ee940bbd3e821e467cfc3e59f7736c86c46b706e18bb80ea83a997b046411d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c6617cb06a25b35b975e59d2e2b0a9bf14b02d56f3f72c66f8344317dc41399","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c6617cb06a25b35b975e59d2e2b0a9bf14b02d56f3f72c66f8344317dc41399"} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c6617cb06a25b35b975e59d2e2b0a9bf14b02d56f3f72c66f8344317dc41399","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e64149d493063174b44efb91b8c4aa04cc8f3180aa96a54c02f10eecb4a25d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d929a88ffb2e8de7ac05ff70fa66bc1975690a2144bf36a6e66c20eaa55e5640","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d929a88ffb2e8de7ac05ff70fa66bc1975690a2144bf36a6e66c20eaa55e5640","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e64149d493063174b44efb91b8c4aa04cc8f3180aa96a54c02f10eecb4a25d3"} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41ee940bbd3e821e467cfc3e59f7736c86c46b706e18bb80ea83a997b046411d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41ee940bbd3e821e467cfc3e59f7736c86c46b706e18bb80ea83a997b046411d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d929a88ffb2e8de7ac05ff70fa66bc1975690a2144bf36a6e66c20eaa55e5640"} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41ee940bbd3e821e467cfc3e59f7736c86c46b706e18bb80ea83a997b046411d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c6617cb06a25b35b975e59d2e2b0a9bf14b02d56f3f72c66f8344317dc41399","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c6617cb06a25b35b975e59d2e2b0a9bf14b02d56f3f72c66f8344317dc41399"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46"} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c6617cb06a25b35b975e59d2e2b0a9bf14b02d56f3f72c66f8344317dc41399","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d929a88ffb2e8de7ac05ff70fa66bc1975690a2144bf36a6e66c20eaa55e5640","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d929a88ffb2e8de7ac05ff70fa66bc1975690a2144bf36a6e66c20eaa55e5640"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d929a88ffb2e8de7ac05ff70fa66bc1975690a2144bf36a6e66c20eaa55e5640","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e64149d493063174b44efb91b8c4aa04cc8f3180aa96a54c02f10eecb4a25d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e64149d493063174b44efb91b8c4aa04cc8f3180aa96a54c02f10eecb4a25d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41ee940bbd3e821e467cfc3e59f7736c86c46b706e18bb80ea83a997b046411d"} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e64149d493063174b44efb91b8c4aa04cc8f3180aa96a54c02f10eecb4a25d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c6617cb06a25b35b975e59d2e2b0a9bf14b02d56f3f72c66f8344317dc41399"} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41ee940bbd3e821e467cfc3e59f7736c86c46b706e18bb80ea83a997b046411d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c6617cb06a25b35b975e59d2e2b0a9bf14b02d56f3f72c66f8344317dc41399","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d929a88ffb2e8de7ac05ff70fa66bc1975690a2144bf36a6e66c20eaa55e5640","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e64149d493063174b44efb91b8c4aa04cc8f3180aa96a54c02f10eecb4a25d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4df8388aaa73cfae5a942debe942bd56d5de436b60d2f79f6e54da1976d3857a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d929a88ffb2e8de7ac05ff70fa66bc1975690a2144bf36a6e66c20eaa55e5640"} {"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e64149d493063174b44efb91b8c4aa04cc8f3180aa96a54c02f10eecb4a25d3"} {"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46"} {"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4df8388aaa73cfae5a942debe942bd56d5de436b60d2f79f6e54da1976d3857a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"} {"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4df8388aaa73cfae5a942debe942bd56d5de436b60d2f79f6e54da1976d3857a"} {"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef8bf6d8b6f1c548bf091adc6f8ce50c27b0f374467e02288bb6c65c8a7542a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"} {"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef8bf6d8b6f1c548bf091adc6f8ce50c27b0f374467e02288bb6c65c8a7542a2"} {"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/974a62410ca9a7b4e77cab273475b92200b56858a67c9ebb7ce6f96b0790c7b5"} {"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef8bf6d8b6f1c548bf091adc6f8ce50c27b0f374467e02288bb6c65c8a7542a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"} {"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0932c1219f2ed7f93b9210855bdefedd4dbfc7a2e3a89253252a54c39c43879b"} {"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"974a62410ca9a7b4e77cab273475b92200b56858a67c9ebb7ce6f96b0790c7b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["974a62410ca9a7b4e77cab273475b92200b56858a67c9ebb7ce6f96b0790c7b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d60217d2763a9fd6f49d1b884577f96a7248030db780102bb32895ce3052764a"} {"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eae43647251c268f1c841ca285ea9bcf8903cb77e041be0c3f927071393b63e"} {"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/001bfa827fbe458785426c0fb320a8c9ed6bbd9c60573f16536e1fa5d85ac3d4"} {"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"974a62410ca9a7b4e77cab273475b92200b56858a67c9ebb7ce6f96b0790c7b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0932c1219f2ed7f93b9210855bdefedd4dbfc7a2e3a89253252a54c39c43879b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0932c1219f2ed7f93b9210855bdefedd4dbfc7a2e3a89253252a54c39c43879b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"} {"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef8bf6d8b6f1c548bf091adc6f8ce50c27b0f374467e02288bb6c65c8a7542a2"} {"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0932c1219f2ed7f93b9210855bdefedd4dbfc7a2e3a89253252a54c39c43879b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4df8388aaa73cfae5a942debe942bd56d5de436b60d2f79f6e54da1976d3857a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4df8388aaa73cfae5a942debe942bd56d5de436b60d2f79f6e54da1976d3857a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"} {"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4df8388aaa73cfae5a942debe942bd56d5de436b60d2f79f6e54da1976d3857a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d60217d2763a9fd6f49d1b884577f96a7248030db780102bb32895ce3052764a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d60217d2763a9fd6f49d1b884577f96a7248030db780102bb32895ce3052764a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/974a62410ca9a7b4e77cab273475b92200b56858a67c9ebb7ce6f96b0790c7b5"} {"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d60217d2763a9fd6f49d1b884577f96a7248030db780102bb32895ce3052764a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eae43647251c268f1c841ca285ea9bcf8903cb77e041be0c3f927071393b63e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3eae43647251c268f1c841ca285ea9bcf8903cb77e041be0c3f927071393b63e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0932c1219f2ed7f93b9210855bdefedd4dbfc7a2e3a89253252a54c39c43879b"} {"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4df8388aaa73cfae5a942debe942bd56d5de436b60d2f79f6e54da1976d3857a"} {"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d60217d2763a9fd6f49d1b884577f96a7248030db780102bb32895ce3052764a"} {"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3eae43647251c268f1c841ca285ea9bcf8903cb77e041be0c3f927071393b63e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"001bfa827fbe458785426c0fb320a8c9ed6bbd9c60573f16536e1fa5d85ac3d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["001bfa827fbe458785426c0fb320a8c9ed6bbd9c60573f16536e1fa5d85ac3d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eae43647251c268f1c841ca285ea9bcf8903cb77e041be0c3f927071393b63e"} {"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"001bfa827fbe458785426c0fb320a8c9ed6bbd9c60573f16536e1fa5d85ac3d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef8bf6d8b6f1c548bf091adc6f8ce50c27b0f374467e02288bb6c65c8a7542a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef8bf6d8b6f1c548bf091adc6f8ce50c27b0f374467e02288bb6c65c8a7542a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/001bfa827fbe458785426c0fb320a8c9ed6bbd9c60573f16536e1fa5d85ac3d4"} {"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef8bf6d8b6f1c548bf091adc6f8ce50c27b0f374467e02288bb6c65c8a7542a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef8bf6d8b6f1c548bf091adc6f8ce50c27b0f374467e02288bb6c65c8a7542a2"} {"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"974a62410ca9a7b4e77cab273475b92200b56858a67c9ebb7ce6f96b0790c7b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0932c1219f2ed7f93b9210855bdefedd4dbfc7a2e3a89253252a54c39c43879b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4df8388aaa73cfae5a942debe942bd56d5de436b60d2f79f6e54da1976d3857a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d60217d2763a9fd6f49d1b884577f96a7248030db780102bb32895ce3052764a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eae43647251c268f1c841ca285ea9bcf8903cb77e041be0c3f927071393b63e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"001bfa827fbe458785426c0fb320a8c9ed6bbd9c60573f16536e1fa5d85ac3d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef8bf6d8b6f1c548bf091adc6f8ce50c27b0f374467e02288bb6c65c8a7542a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"} {"level":"info","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e865f32a-715b-42cc-85ec-0527d08ec5c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53442","PortSpecifier":{"PortValue":53442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e865f32a-715b-42cc-85ec-0527d08ec5c0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e865f32a-715b-42cc-85ec-0527d08ec5c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53442","PortSpecifier":{"PortValue":53442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640357,"nanos":880657135},"http":{"id":"e865f32a-715b-42cc-85ec-0527d08ec5c0","method":"POST","headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e865f32a-715b-42cc-85ec-0527d08ec5c0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e865f32a-715b-42cc-85ec-0527d08ec5c0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"]}} {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e865f32a-715b-42cc-85ec-0527d08ec5c0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e865f32a-715b-42cc-85ec-0527d08ec5c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e865f32a-715b-42cc-85ec-0527d08ec5c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e865f32a-715b-42cc-85ec-0527d08ec5c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3a013/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e865f32a-715b-42cc-85ec-0527d08ec5c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e865f32a-715b-42cc-85ec-0527d08ec5c0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e865f32a-715b-42cc-85ec-0527d08ec5c0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e865f32a-715b-42cc-85ec-0527d08ec5c0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e865f32a-715b-42cc-85ec-0527d08ec5c0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52b7cce5-77e2-4eec-b201-9004895442a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51818","PortSpecifier":{"PortValue":51818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52b7cce5-77e2-4eec-b201-9004895442a0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52b7cce5-77e2-4eec-b201-9004895442a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51818","PortSpecifier":{"PortValue":51818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640357,"nanos":923472911},"http":{"id":"52b7cce5-77e2-4eec-b201-9004895442a0","method":"POST","headers":{":authority":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"52b7cce5-77e2-4eec-b201-9004895442a0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52b7cce5-77e2-4eec-b201-9004895442a0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"]}} {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52b7cce5-77e2-4eec-b201-9004895442a0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52b7cce5-77e2-4eec-b201-9004895442a0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52b7cce5-77e2-4eec-b201-9004895442a0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52b7cce5-77e2-4eec-b201-9004895442a0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cfed01/rate-test-model-cfed01\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cfed01/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"52b7cce5-77e2-4eec-b201-9004895442a0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52b7cce5-77e2-4eec-b201-9004895442a0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52b7cce5-77e2-4eec-b201-9004895442a0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52b7cce5-77e2-4eec-b201-9004895442a0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52b7cce5-77e2-4eec-b201-9004895442a0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53458","PortSpecifier":{"PortValue":53458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","method":"POST","path":"/ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013/v1/completions","host":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53458","PortSpecifier":{"PortValue":53458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640357,"nanos":966715854},"http":{"id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","method":"POST","headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tA49DnOF5GJjlpbG_VnaddaqIrQ7GVEd0Ntr1iRds2MoNghqP86mmmfaNQkS"} {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tA49DnOF5GJjlpbG_VnaddaqIrQ7GVEd0Ntr1iRds2MoNghqP86mmmfaNQkS\"}"} {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"88bda5cd-259b-4c7d-a626-9423901df036","keyName":"e2e-rate-a-7675bb","subscription":"e2e-rate-iso-a-7675bb","tenant":"e2e-shared-a-b3a013","userId":"88bda5cd-259b-4c7d-a626-9423901df036","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013\",\"requestedSubscription\":\"e2e-rate-iso-a-7675bb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b3a013","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7675bb","namespace":"ai-tenant-e2e-shared-a-b3a013","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013"}} {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3a013/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7675bb"} {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"88bda5cd-259b-4c7d-a626-9423901df036","keyName":"e2e-rate-a-7675bb","selected_subscription":"e2e-rate-iso-a-7675bb","selected_subscription_key":"ai-tenant-e2e-shared-a-b3a013/e2e-rate-iso-a-7675bb@ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b3a013","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7675bb","namespace":"ai-tenant-e2e-shared-a-b3a013","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53462","PortSpecifier":{"PortValue":53462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","method":"POST","path":"/ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013/v1/completions","host":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53462","PortSpecifier":{"PortValue":53462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640359,"nanos":50574592},"http":{"id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","method":"POST","headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tA49DnOF5GJjlpbG_VnaddaqIrQ7GVEd0Ntr1iRds2MoNghqP86mmmfaNQkS"} {"level":"debug","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tA49DnOF5GJjlpbG_VnaddaqIrQ7GVEd0Ntr1iRds2MoNghqP86mmmfaNQkS\"}"} {"level":"debug","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"88bda5cd-259b-4c7d-a626-9423901df036","keyName":"e2e-rate-a-7675bb","subscription":"e2e-rate-iso-a-7675bb","tenant":"e2e-shared-a-b3a013","userId":"88bda5cd-259b-4c7d-a626-9423901df036","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013\",\"requestedSubscription\":\"e2e-rate-iso-a-7675bb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b3a013","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7675bb","namespace":"ai-tenant-e2e-shared-a-b3a013","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013"}} {"level":"debug","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3a013/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7675bb"} {"level":"debug","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"88bda5cd-259b-4c7d-a626-9423901df036","keyName":"e2e-rate-a-7675bb","selected_subscription":"e2e-rate-iso-a-7675bb","selected_subscription_key":"ai-tenant-e2e-shared-a-b3a013/e2e-rate-iso-a-7675bb@ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b3a013","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7675bb","namespace":"ai-tenant-e2e-shared-a-b3a013","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53474","PortSpecifier":{"PortValue":53474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b8229413-d87a-42bc-bc67-56856315e2fb","method":"POST","path":"/ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013/v1/completions","host":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53474","PortSpecifier":{"PortValue":53474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640360,"nanos":97910349},"http":{"id":"b8229413-d87a-42bc-bc67-56856315e2fb","method":"POST","headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tA49DnOF5GJjlpbG_VnaddaqIrQ7GVEd0Ntr1iRds2MoNghqP86mmmfaNQkS"} {"level":"debug","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tA49DnOF5GJjlpbG_VnaddaqIrQ7GVEd0Ntr1iRds2MoNghqP86mmmfaNQkS\"}"} {"level":"debug","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"88bda5cd-259b-4c7d-a626-9423901df036","keyName":"e2e-rate-a-7675bb","subscription":"e2e-rate-iso-a-7675bb","tenant":"e2e-shared-a-b3a013","userId":"88bda5cd-259b-4c7d-a626-9423901df036","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013\",\"requestedSubscription\":\"e2e-rate-iso-a-7675bb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b3a013","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7675bb","namespace":"ai-tenant-e2e-shared-a-b3a013","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013"}} {"level":"debug","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3a013/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7675bb"} {"level":"debug","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"88bda5cd-259b-4c7d-a626-9423901df036","keyName":"e2e-rate-a-7675bb","selected_subscription":"e2e-rate-iso-a-7675bb","selected_subscription_key":"ai-tenant-e2e-shared-a-b3a013/e2e-rate-iso-a-7675bb@ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b3a013","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7675bb","namespace":"ai-tenant-e2e-shared-a-b3a013","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0943f287-23b5-4ede-a9ca-4711b6ed9dbe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46750","PortSpecifier":{"PortValue":46750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0943f287-23b5-4ede-a9ca-4711b6ed9dbe","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0943f287-23b5-4ede-a9ca-4711b6ed9dbe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46750","PortSpecifier":{"PortValue":46750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640373,"nanos":82310889},"http":{"id":"0943f287-23b5-4ede-a9ca-4711b6ed9dbe","method":"POST","headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0943f287-23b5-4ede-a9ca-4711b6ed9dbe","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0943f287-23b5-4ede-a9ca-4711b6ed9dbe","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"]}} {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0943f287-23b5-4ede-a9ca-4711b6ed9dbe","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0943f287-23b5-4ede-a9ca-4711b6ed9dbe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0943f287-23b5-4ede-a9ca-4711b6ed9dbe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0943f287-23b5-4ede-a9ca-4711b6ed9dbe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3a013/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0943f287-23b5-4ede-a9ca-4711b6ed9dbe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0943f287-23b5-4ede-a9ca-4711b6ed9dbe","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0943f287-23b5-4ede-a9ca-4711b6ed9dbe","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0943f287-23b5-4ede-a9ca-4711b6ed9dbe","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0943f287-23b5-4ede-a9ca-4711b6ed9dbe","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4005b352-82d6-47b0-bc29-c3731c52403e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37962","PortSpecifier":{"PortValue":37962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4005b352-82d6-47b0-bc29-c3731c52403e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4005b352-82d6-47b0-bc29-c3731c52403e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37962","PortSpecifier":{"PortValue":37962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640373,"nanos":123219169},"http":{"id":"4005b352-82d6-47b0-bc29-c3731c52403e","method":"POST","headers":{":authority":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4005b352-82d6-47b0-bc29-c3731c52403e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4005b352-82d6-47b0-bc29-c3731c52403e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"]}} {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4005b352-82d6-47b0-bc29-c3731c52403e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4005b352-82d6-47b0-bc29-c3731c52403e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4005b352-82d6-47b0-bc29-c3731c52403e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4005b352-82d6-47b0-bc29-c3731c52403e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cfed01/rate-test-model-cfed01\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cfed01/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4005b352-82d6-47b0-bc29-c3731c52403e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4005b352-82d6-47b0-bc29-c3731c52403e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4005b352-82d6-47b0-bc29-c3731c52403e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4005b352-82d6-47b0-bc29-c3731c52403e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4005b352-82d6-47b0-bc29-c3731c52403e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46762","PortSpecifier":{"PortValue":46762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","method":"POST","path":"/ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013/v1/completions","host":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46762","PortSpecifier":{"PortValue":46762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640373,"nanos":161234124},"http":{"id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","method":"POST","headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lCrz0PAxkfdwGdyj_GNS4cLLOF9ThhbZFUrz3xKD32svRf6Sx97vYPOsxVlT"} {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lCrz0PAxkfdwGdyj_GNS4cLLOF9ThhbZFUrz3xKD32svRf6Sx97vYPOsxVlT\"}"} {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f76d6a56-0b0e-4534-a8c3-6e680439fc24","keyName":"e2e-rate-a-294e09","subscription":"e2e-rate-iso-a-294e09","tenant":"e2e-shared-a-b3a013","userId":"f76d6a56-0b0e-4534-a8c3-6e680439fc24","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013\",\"requestedSubscription\":\"e2e-rate-iso-a-294e09\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b3a013","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-294e09","namespace":"ai-tenant-e2e-shared-a-b3a013","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013"}} {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3a013/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-294e09"} {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f76d6a56-0b0e-4534-a8c3-6e680439fc24","keyName":"e2e-rate-a-294e09","selected_subscription":"e2e-rate-iso-a-294e09","selected_subscription_key":"ai-tenant-e2e-shared-a-b3a013/e2e-rate-iso-a-294e09@ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b3a013","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-294e09","namespace":"ai-tenant-e2e-shared-a-b3a013","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42828","PortSpecifier":{"PortValue":42828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","method":"POST","path":"/ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013/v1/completions","host":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42828","PortSpecifier":{"PortValue":42828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640374,"nanos":201156334},"http":{"id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","method":"POST","headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lCrz0PAxkfdwGdyj_GNS4cLLOF9ThhbZFUrz3xKD32svRf6Sx97vYPOsxVlT"} {"level":"debug","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lCrz0PAxkfdwGdyj_GNS4cLLOF9ThhbZFUrz3xKD32svRf6Sx97vYPOsxVlT\"}"} {"level":"debug","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f76d6a56-0b0e-4534-a8c3-6e680439fc24","keyName":"e2e-rate-a-294e09","subscription":"e2e-rate-iso-a-294e09","tenant":"e2e-shared-a-b3a013","userId":"f76d6a56-0b0e-4534-a8c3-6e680439fc24","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013\",\"requestedSubscription\":\"e2e-rate-iso-a-294e09\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b3a013","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-294e09","namespace":"ai-tenant-e2e-shared-a-b3a013","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013"}} {"level":"debug","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3a013/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-294e09"} {"level":"debug","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f76d6a56-0b0e-4534-a8c3-6e680439fc24","keyName":"e2e-rate-a-294e09","selected_subscription":"e2e-rate-iso-a-294e09","selected_subscription_key":"ai-tenant-e2e-shared-a-b3a013/e2e-rate-iso-a-294e09@ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b3a013","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-294e09","namespace":"ai-tenant-e2e-shared-a-b3a013","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2327629d-1539-4976-a4cc-196fe77da152","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42836","PortSpecifier":{"PortValue":42836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2327629d-1539-4976-a4cc-196fe77da152","method":"POST","path":"/ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013/v1/completions","host":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2327629d-1539-4976-a4cc-196fe77da152","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42836","PortSpecifier":{"PortValue":42836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640375,"nanos":242929722},"http":{"id":"2327629d-1539-4976-a4cc-196fe77da152","method":"POST","headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2327629d-1539-4976-a4cc-196fe77da152","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lCrz0PAxkfdwGdyj_GNS4cLLOF9ThhbZFUrz3xKD32svRf6Sx97vYPOsxVlT"} {"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2327629d-1539-4976-a4cc-196fe77da152","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lCrz0PAxkfdwGdyj_GNS4cLLOF9ThhbZFUrz3xKD32svRf6Sx97vYPOsxVlT\"}"} {"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2327629d-1539-4976-a4cc-196fe77da152","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f76d6a56-0b0e-4534-a8c3-6e680439fc24","keyName":"e2e-rate-a-294e09","subscription":"e2e-rate-iso-a-294e09","tenant":"e2e-shared-a-b3a013","userId":"f76d6a56-0b0e-4534-a8c3-6e680439fc24","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2327629d-1539-4976-a4cc-196fe77da152","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013\",\"requestedSubscription\":\"e2e-rate-iso-a-294e09\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2327629d-1539-4976-a4cc-196fe77da152","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b3a013","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-294e09","namespace":"ai-tenant-e2e-shared-a-b3a013","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013"}} {"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2327629d-1539-4976-a4cc-196fe77da152","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2327629d-1539-4976-a4cc-196fe77da152","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2327629d-1539-4976-a4cc-196fe77da152","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2327629d-1539-4976-a4cc-196fe77da152","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2327629d-1539-4976-a4cc-196fe77da152","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3a013/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2327629d-1539-4976-a4cc-196fe77da152","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2327629d-1539-4976-a4cc-196fe77da152","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-294e09"} {"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2327629d-1539-4976-a4cc-196fe77da152","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2327629d-1539-4976-a4cc-196fe77da152","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f76d6a56-0b0e-4534-a8c3-6e680439fc24","keyName":"e2e-rate-a-294e09","selected_subscription":"e2e-rate-iso-a-294e09","selected_subscription_key":"ai-tenant-e2e-shared-a-b3a013/e2e-rate-iso-a-294e09@ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b3a013","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-294e09","namespace":"ai-tenant-e2e-shared-a-b3a013","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2327629d-1539-4976-a4cc-196fe77da152","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2327629d-1539-4976-a4cc-196fe77da152","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36182","PortSpecifier":{"PortValue":36182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"db7e67a8-8e74-4c94-8121-db7d29410512","method":"POST","path":"/ai-tenant-e2e-shared-b-cfed01/rate-test-model-cfed01/v1/completions","host":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36182","PortSpecifier":{"PortValue":36182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640375,"nanos":288899597},"http":{"id":"db7e67a8-8e74-4c94-8121-db7d29410512","method":"POST","headers":{":authority":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-cfed01/rate-test-model-cfed01/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1NaCxZ0afjxfz6ZQF_PFK0t3MzJiLCSGEIojOxrVzRmYLAyVnyLvM6EJ8yKm2"} {"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-cfed01.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1NaCxZ0afjxfz6ZQF_PFK0t3MzJiLCSGEIojOxrVzRmYLAyVnyLvM6EJ8yKm2\"}"} {"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-cfed01.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ce803378-d96b-4b46-b498-c85dd0b54589","keyName":"e2e-rate-b-294e09","subscription":"e2e-rate-iso-b-294e09","tenant":"e2e-shared-b-cfed01","userId":"ce803378-d96b-4b46-b498-c85dd0b54589","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-cfed01.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-cfed01/rate-test-model-cfed01\",\"requestedSubscription\":\"e2e-rate-iso-b-294e09\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-cfed01.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cfed01","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-294e09","namespace":"ai-tenant-e2e-shared-b-cfed01","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-cfed01/rate-test-model-cfed01"}} {"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cfed01/rate-test-model-cfed01\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cfed01/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-294e09"} {"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ce803378-d96b-4b46-b498-c85dd0b54589","keyName":"e2e-rate-b-294e09","selected_subscription":"e2e-rate-iso-b-294e09","selected_subscription_key":"ai-tenant-e2e-shared-b-cfed01/e2e-rate-iso-b-294e09@ai-tenant-e2e-shared-b-cfed01/rate-test-model-cfed01","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cfed01","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-294e09","namespace":"ai-tenant-e2e-shared-b-cfed01","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-cfed01/rate-test-model-cfed01"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T13:26:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e64149d493063174b44efb91b8c4aa04cc8f3180aa96a54c02f10eecb4a25d3"} {"level":"info","ts":"2026-07-21T13:26:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c6617cb06a25b35b975e59d2e2b0a9bf14b02d56f3f72c66f8344317dc41399"} {"level":"info","ts":"2026-07-21T13:26:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"} {"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07fd17709eb375450d56096a9e90787f63bc96c326647c2fb3009a2e9b6e48a9"} {"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46"} {"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0932c1219f2ed7f93b9210855bdefedd4dbfc7a2e3a89253252a54c39c43879b"} {"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88"} {"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"} {"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef8bf6d8b6f1c548bf091adc6f8ce50c27b0f374467e02288bb6c65c8a7542a2"} {"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a8435c24bf8c653822d25061a36e86648e6e54b372ca78e6763ffe38882fe26"} {"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d60217d2763a9fd6f49d1b884577f96a7248030db780102bb32895ce3052764a"} {"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3eae43647251c268f1c841ca285ea9bcf8903cb77e041be0c3f927071393b63e"} {"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702"} {"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d74ef885df16963e63f4ad0ac0a99c5236d4449f970855ad66d454db56567a82"} {"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d929a88ffb2e8de7ac05ff70fa66bc1975690a2144bf36a6e66c20eaa55e5640"} {"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41ee940bbd3e821e467cfc3e59f7736c86c46b706e18bb80ea83a997b046411d"} {"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/001bfa827fbe458785426c0fb320a8c9ed6bbd9c60573f16536e1fa5d85ac3d4"} {"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4df8388aaa73cfae5a942debe942bd56d5de436b60d2f79f6e54da1976d3857a"} {"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"} {"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa"} {"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/974a62410ca9a7b4e77cab273475b92200b56858a67c9ebb7ce6f96b0790c7b5"} {"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e41a0843ef7dfee096d7ea81a6978fdedce94347e4dca232572baae380f5e9ca"} {"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"} {"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"}