--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-07T18:15:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eca0dcd71b30cf06ec33a94aa54488a0952dc1b1a883e35c1490b2b005e1e337","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:15:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eca0dcd71b30cf06ec33a94aa54488a0952dc1b1a883e35c1490b2b005e1e337"} {"level":"debug","ts":"2026-07-07T18:15:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eca0dcd71b30cf06ec33a94aa54488a0952dc1b1a883e35c1490b2b005e1e337","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:15:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eca0dcd71b30cf06ec33a94aa54488a0952dc1b1a883e35c1490b2b005e1e337"} {"level":"debug","ts":"2026-07-07T18:15:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eca0dcd71b30cf06ec33a94aa54488a0952dc1b1a883e35c1490b2b005e1e337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:15:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:15:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eca0dcd71b30cf06ec33a94aa54488a0952dc1b1a883e35c1490b2b005e1e337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:15:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eca0dcd71b30cf06ec33a94aa54488a0952dc1b1a883e35c1490b2b005e1e337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:15:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eca0dcd71b30cf06ec33a94aa54488a0952dc1b1a883e35c1490b2b005e1e337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:15:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:15:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:15:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eca0dcd71b30cf06ec33a94aa54488a0952dc1b1a883e35c1490b2b005e1e337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:15:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f31e390dd57c91d817e2e821c562a5df01e4097b3a0041d7f6296231543bb70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:15:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:15:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:15:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eca0dcd71b30cf06ec33a94aa54488a0952dc1b1a883e35c1490b2b005e1e337"} {"level":"info","ts":"2026-07-07T18:15:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f31e390dd57c91d817e2e821c562a5df01e4097b3a0041d7f6296231543bb70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:15:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eca0dcd71b30cf06ec33a94aa54488a0952dc1b1a883e35c1490b2b005e1e337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:15:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:15:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eca0dcd71b30cf06ec33a94aa54488a0952dc1b1a883e35c1490b2b005e1e337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:15:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f31e390dd57c91d817e2e821c562a5df01e4097b3a0041d7f6296231543bb70"} {"level":"info","ts":"2026-07-07T18:15:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eca0dcd71b30cf06ec33a94aa54488a0952dc1b1a883e35c1490b2b005e1e337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:15:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f31e390dd57c91d817e2e821c562a5df01e4097b3a0041d7f6296231543bb70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:15:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:15:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f31e390dd57c91d817e2e821c562a5df01e4097b3a0041d7f6296231543bb70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:15:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f31e390dd57c91d817e2e821c562a5df01e4097b3a0041d7f6296231543bb70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:15:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eca0dcd71b30cf06ec33a94aa54488a0952dc1b1a883e35c1490b2b005e1e337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:15:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:15:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:15:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eca0dcd71b30cf06ec33a94aa54488a0952dc1b1a883e35c1490b2b005e1e337"} {"level":"info","ts":"2026-07-07T18:15:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eca0dcd71b30cf06ec33a94aa54488a0952dc1b1a883e35c1490b2b005e1e337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:15:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f31e390dd57c91d817e2e821c562a5df01e4097b3a0041d7f6296231543bb70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:15:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:15:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:15:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f31e390dd57c91d817e2e821c562a5df01e4097b3a0041d7f6296231543bb70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:15:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eca0dcd71b30cf06ec33a94aa54488a0952dc1b1a883e35c1490b2b005e1e337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:15:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:15:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eca0dcd71b30cf06ec33a94aa54488a0952dc1b1a883e35c1490b2b005e1e337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:15:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f31e390dd57c91d817e2e821c562a5df01e4097b3a0041d7f6296231543bb70"} {"level":"info","ts":"2026-07-07T18:15:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eca0dcd71b30cf06ec33a94aa54488a0952dc1b1a883e35c1490b2b005e1e337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:15:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f31e390dd57c91d817e2e821c562a5df01e4097b3a0041d7f6296231543bb70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:15:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:15:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f31e390dd57c91d817e2e821c562a5df01e4097b3a0041d7f6296231543bb70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:15:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f31e390dd57c91d817e2e821c562a5df01e4097b3a0041d7f6296231543bb70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:15:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eca0dcd71b30cf06ec33a94aa54488a0952dc1b1a883e35c1490b2b005e1e337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:15:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:15:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:15:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eca0dcd71b30cf06ec33a94aa54488a0952dc1b1a883e35c1490b2b005e1e337"} {"level":"info","ts":"2026-07-07T18:15:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eca0dcd71b30cf06ec33a94aa54488a0952dc1b1a883e35c1490b2b005e1e337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:15:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f31e390dd57c91d817e2e821c562a5df01e4097b3a0041d7f6296231543bb70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:15:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:15:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f31e390dd57c91d817e2e821c562a5df01e4097b3a0041d7f6296231543bb70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eca0dcd71b30cf06ec33a94aa54488a0952dc1b1a883e35c1490b2b005e1e337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:15:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:15:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eca0dcd71b30cf06ec33a94aa54488a0952dc1b1a883e35c1490b2b005e1e337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f31e390dd57c91d817e2e821c562a5df01e4097b3a0041d7f6296231543bb70"} {"level":"info","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eca0dcd71b30cf06ec33a94aa54488a0952dc1b1a883e35c1490b2b005e1e337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f31e390dd57c91d817e2e821c562a5df01e4097b3a0041d7f6296231543bb70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:15:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:15:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f31e390dd57c91d817e2e821c562a5df01e4097b3a0041d7f6296231543bb70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eca0dcd71b30cf06ec33a94aa54488a0952dc1b1a883e35c1490b2b005e1e337"} {"level":"info","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f31e390dd57c91d817e2e821c562a5df01e4097b3a0041d7f6296231543bb70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eca0dcd71b30cf06ec33a94aa54488a0952dc1b1a883e35c1490b2b005e1e337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f31e390dd57c91d817e2e821c562a5df01e4097b3a0041d7f6296231543bb70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:15:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:15:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f31e390dd57c91d817e2e821c562a5df01e4097b3a0041d7f6296231543bb70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f31e390dd57c91d817e2e821c562a5df01e4097b3a0041d7f6296231543bb70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d21c857a071a3109a98f4273ae7e8a6122c61b98f83ef40e3818a586c028466","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:15:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:15:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f31e390dd57c91d817e2e821c562a5df01e4097b3a0041d7f6296231543bb70"} {"level":"info","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d21c857a071a3109a98f4273ae7e8a6122c61b98f83ef40e3818a586c028466","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f31e390dd57c91d817e2e821c562a5df01e4097b3a0041d7f6296231543bb70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:15:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:15:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f31e390dd57c91d817e2e821c562a5df01e4097b3a0041d7f6296231543bb70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f31e390dd57c91d817e2e821c562a5df01e4097b3a0041d7f6296231543bb70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d21c857a071a3109a98f4273ae7e8a6122c61b98f83ef40e3818a586c028466","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f31e390dd57c91d817e2e821c562a5df01e4097b3a0041d7f6296231543bb70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eca0dcd71b30cf06ec33a94aa54488a0952dc1b1a883e35c1490b2b005e1e337"} {"level":"debug","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d21c857a071a3109a98f4273ae7e8a6122c61b98f83ef40e3818a586c028466","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:15:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:15:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d21c857a071a3109a98f4273ae7e8a6122c61b98f83ef40e3818a586c028466","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d21c857a071a3109a98f4273ae7e8a6122c61b98f83ef40e3818a586c028466","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d21c857a071a3109a98f4273ae7e8a6122c61b98f83ef40e3818a586c028466"} {"level":"debug","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d21c857a071a3109a98f4273ae7e8a6122c61b98f83ef40e3818a586c028466","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:15:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:15:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d21c857a071a3109a98f4273ae7e8a6122c61b98f83ef40e3818a586c028466"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d21c857a071a3109a98f4273ae7e8a6122c61b98f83ef40e3818a586c028466","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d21c857a071a3109a98f4273ae7e8a6122c61b98f83ef40e3818a586c028466","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c238e6ea8a251ec1cfdb2550f3bbe45bf392b88539ddd263090143d97895b9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:15:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:15:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f31e390dd57c91d817e2e821c562a5df01e4097b3a0041d7f6296231543bb70"} {"level":"info","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c238e6ea8a251ec1cfdb2550f3bbe45bf392b88539ddd263090143d97895b9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c238e6ea8a251ec1cfdb2550f3bbe45bf392b88539ddd263090143d97895b9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c238e6ea8a251ec1cfdb2550f3bbe45bf392b88539ddd263090143d97895b9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c238e6ea8a251ec1cfdb2550f3bbe45bf392b88539ddd263090143d97895b9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d21c857a071a3109a98f4273ae7e8a6122c61b98f83ef40e3818a586c028466"} {"level":"info","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c238e6ea8a251ec1cfdb2550f3bbe45bf392b88539ddd263090143d97895b9e"} {"level":"debug","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c238e6ea8a251ec1cfdb2550f3bbe45bf392b88539ddd263090143d97895b9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:15:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:15:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c238e6ea8a251ec1cfdb2550f3bbe45bf392b88539ddd263090143d97895b9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c238e6ea8a251ec1cfdb2550f3bbe45bf392b88539ddd263090143d97895b9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c238e6ea8a251ec1cfdb2550f3bbe45bf392b88539ddd263090143d97895b9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:15:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:15:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c238e6ea8a251ec1cfdb2550f3bbe45bf392b88539ddd263090143d97895b9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c238e6ea8a251ec1cfdb2550f3bbe45bf392b88539ddd263090143d97895b9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c238e6ea8a251ec1cfdb2550f3bbe45bf392b88539ddd263090143d97895b9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c238e6ea8a251ec1cfdb2550f3bbe45bf392b88539ddd263090143d97895b9e"} {"level":"debug","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c238e6ea8a251ec1cfdb2550f3bbe45bf392b88539ddd263090143d97895b9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c238e6ea8a251ec1cfdb2550f3bbe45bf392b88539ddd263090143d97895b9e"} {"level":"debug","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c238e6ea8a251ec1cfdb2550f3bbe45bf392b88539ddd263090143d97895b9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:15:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:15:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c238e6ea8a251ec1cfdb2550f3bbe45bf392b88539ddd263090143d97895b9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c238e6ea8a251ec1cfdb2550f3bbe45bf392b88539ddd263090143d97895b9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c238e6ea8a251ec1cfdb2550f3bbe45bf392b88539ddd263090143d97895b9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:15:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:15:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c238e6ea8a251ec1cfdb2550f3bbe45bf392b88539ddd263090143d97895b9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c238e6ea8a251ec1cfdb2550f3bbe45bf392b88539ddd263090143d97895b9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c238e6ea8a251ec1cfdb2550f3bbe45bf392b88539ddd263090143d97895b9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c238e6ea8a251ec1cfdb2550f3bbe45bf392b88539ddd263090143d97895b9e"} {"level":"debug","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c238e6ea8a251ec1cfdb2550f3bbe45bf392b88539ddd263090143d97895b9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c238e6ea8a251ec1cfdb2550f3bbe45bf392b88539ddd263090143d97895b9e"} {"level":"debug","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c238e6ea8a251ec1cfdb2550f3bbe45bf392b88539ddd263090143d97895b9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:15:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:15:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c238e6ea8a251ec1cfdb2550f3bbe45bf392b88539ddd263090143d97895b9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c238e6ea8a251ec1cfdb2550f3bbe45bf392b88539ddd263090143d97895b9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c238e6ea8a251ec1cfdb2550f3bbe45bf392b88539ddd263090143d97895b9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c238e6ea8a251ec1cfdb2550f3bbe45bf392b88539ddd263090143d97895b9e"} {"level":"info","ts":"2026-07-07T18:15:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f8b6001109ca958f42bf822aaf097066bbd8aef106c9925b47e71b47beaa0ea"} {"level":"info","ts":"2026-07-07T18:15:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0279d41fd29395396bcc5c0ae4e9185a078a64f5da4b47a7246b4245bc594a06"} {"level":"info","ts":"2026-07-07T18:15:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36789306b27a307e51453ee7feca16e337088c94695a45961e49eedae755d8f9"} {"level":"info","ts":"2026-07-07T18:15:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25157808dd9ca726c83f13ea3a17c46fe8cd1d325c6466bec432c9484cef5541"} {"level":"info","ts":"2026-07-07T18:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eca0dcd71b30cf06ec33a94aa54488a0952dc1b1a883e35c1490b2b005e1e337"} {"level":"info","ts":"2026-07-07T18:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f31e390dd57c91d817e2e821c562a5df01e4097b3a0041d7f6296231543bb70"} {"level":"info","ts":"2026-07-07T18:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c238e6ea8a251ec1cfdb2550f3bbe45bf392b88539ddd263090143d97895b9e"} {"level":"info","ts":"2026-07-07T18:15:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d21c857a071a3109a98f4273ae7e8a6122c61b98f83ef40e3818a586c028466"} {"level":"debug","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73aeff585982038c2245f38bded196f60d96ae6f16763d4d83fc1f8c7f58f40c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73aeff585982038c2245f38bded196f60d96ae6f16763d4d83fc1f8c7f58f40c"} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73aeff585982038c2245f38bded196f60d96ae6f16763d4d83fc1f8c7f58f40c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73aeff585982038c2245f38bded196f60d96ae6f16763d4d83fc1f8c7f58f40c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73aeff585982038c2245f38bded196f60d96ae6f16763d4d83fc1f8c7f58f40c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73aeff585982038c2245f38bded196f60d96ae6f16763d4d83fc1f8c7f58f40c"} {"level":"debug","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73aeff585982038c2245f38bded196f60d96ae6f16763d4d83fc1f8c7f58f40c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73aeff585982038c2245f38bded196f60d96ae6f16763d4d83fc1f8c7f58f40c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73aeff585982038c2245f38bded196f60d96ae6f16763d4d83fc1f8c7f58f40c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73aeff585982038c2245f38bded196f60d96ae6f16763d4d83fc1f8c7f58f40c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73aeff585982038c2245f38bded196f60d96ae6f16763d4d83fc1f8c7f58f40c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73aeff585982038c2245f38bded196f60d96ae6f16763d4d83fc1f8c7f58f40c"} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73aeff585982038c2245f38bded196f60d96ae6f16763d4d83fc1f8c7f58f40c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73aeff585982038c2245f38bded196f60d96ae6f16763d4d83fc1f8c7f58f40c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6"} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73aeff585982038c2245f38bded196f60d96ae6f16763d4d83fc1f8c7f58f40c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73aeff585982038c2245f38bded196f60d96ae6f16763d4d83fc1f8c7f58f40c"} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73aeff585982038c2245f38bded196f60d96ae6f16763d4d83fc1f8c7f58f40c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d31d56eb1cbbfb9bc69f3e10ce3351f59b1c11ba52ca5c83f088fee4fe633ad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6"} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d31d56eb1cbbfb9bc69f3e10ce3351f59b1c11ba52ca5c83f088fee4fe633ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73aeff585982038c2245f38bded196f60d96ae6f16763d4d83fc1f8c7f58f40c"} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d31d56eb1cbbfb9bc69f3e10ce3351f59b1c11ba52ca5c83f088fee4fe633ad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d31d56eb1cbbfb9bc69f3e10ce3351f59b1c11ba52ca5c83f088fee4fe633ad6"} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d31d56eb1cbbfb9bc69f3e10ce3351f59b1c11ba52ca5c83f088fee4fe633ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6"} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d31d56eb1cbbfb9bc69f3e10ce3351f59b1c11ba52ca5c83f088fee4fe633ad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d31d56eb1cbbfb9bc69f3e10ce3351f59b1c11ba52ca5c83f088fee4fe633ad6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856"} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d31d56eb1cbbfb9bc69f3e10ce3351f59b1c11ba52ca5c83f088fee4fe633ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d31d56eb1cbbfb9bc69f3e10ce3351f59b1c11ba52ca5c83f088fee4fe633ad6"} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d31d56eb1cbbfb9bc69f3e10ce3351f59b1c11ba52ca5c83f088fee4fe633ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6"} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856"} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d31d56eb1cbbfb9bc69f3e10ce3351f59b1c11ba52ca5c83f088fee4fe633ad6"} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6"} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856"} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3"} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6"} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3"} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edbdc54189993b91213663d8a8dab00acf56a6cb73258814b125f50aa1832f12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edbdc54189993b91213663d8a8dab00acf56a6cb73258814b125f50aa1832f12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edbdc54189993b91213663d8a8dab00acf56a6cb73258814b125f50aa1832f12"} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edbdc54189993b91213663d8a8dab00acf56a6cb73258814b125f50aa1832f12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edbdc54189993b91213663d8a8dab00acf56a6cb73258814b125f50aa1832f12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edbdc54189993b91213663d8a8dab00acf56a6cb73258814b125f50aa1832f12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3"} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edbdc54189993b91213663d8a8dab00acf56a6cb73258814b125f50aa1832f12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edbdc54189993b91213663d8a8dab00acf56a6cb73258814b125f50aa1832f12"} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edbdc54189993b91213663d8a8dab00acf56a6cb73258814b125f50aa1832f12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edbdc54189993b91213663d8a8dab00acf56a6cb73258814b125f50aa1832f12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edbdc54189993b91213663d8a8dab00acf56a6cb73258814b125f50aa1832f12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3"} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edbdc54189993b91213663d8a8dab00acf56a6cb73258814b125f50aa1832f12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edbdc54189993b91213663d8a8dab00acf56a6cb73258814b125f50aa1832f12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edbdc54189993b91213663d8a8dab00acf56a6cb73258814b125f50aa1832f12"} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edbdc54189993b91213663d8a8dab00acf56a6cb73258814b125f50aa1832f12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edbdc54189993b91213663d8a8dab00acf56a6cb73258814b125f50aa1832f12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edbdc54189993b91213663d8a8dab00acf56a6cb73258814b125f50aa1832f12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3"} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edbdc54189993b91213663d8a8dab00acf56a6cb73258814b125f50aa1832f12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edbdc54189993b91213663d8a8dab00acf56a6cb73258814b125f50aa1832f12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edbdc54189993b91213663d8a8dab00acf56a6cb73258814b125f50aa1832f12"} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edbdc54189993b91213663d8a8dab00acf56a6cb73258814b125f50aa1832f12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edbdc54189993b91213663d8a8dab00acf56a6cb73258814b125f50aa1832f12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edbdc54189993b91213663d8a8dab00acf56a6cb73258814b125f50aa1832f12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3"} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edbdc54189993b91213663d8a8dab00acf56a6cb73258814b125f50aa1832f12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edbdc54189993b91213663d8a8dab00acf56a6cb73258814b125f50aa1832f12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edbdc54189993b91213663d8a8dab00acf56a6cb73258814b125f50aa1832f12"} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edbdc54189993b91213663d8a8dab00acf56a6cb73258814b125f50aa1832f12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edbdc54189993b91213663d8a8dab00acf56a6cb73258814b125f50aa1832f12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edbdc54189993b91213663d8a8dab00acf56a6cb73258814b125f50aa1832f12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3"} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edbdc54189993b91213663d8a8dab00acf56a6cb73258814b125f50aa1832f12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011e8c0067916fc39c0e8a3d215ae854b7a8a04abffd7cdd3ca0f88f9c464d80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edbdc54189993b91213663d8a8dab00acf56a6cb73258814b125f50aa1832f12"} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011e8c0067916fc39c0e8a3d215ae854b7a8a04abffd7cdd3ca0f88f9c464d80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edbdc54189993b91213663d8a8dab00acf56a6cb73258814b125f50aa1832f12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3"} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011e8c0067916fc39c0e8a3d215ae854b7a8a04abffd7cdd3ca0f88f9c464d80"} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011e8c0067916fc39c0e8a3d215ae854b7a8a04abffd7cdd3ca0f88f9c464d80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["011e8c0067916fc39c0e8a3d215ae854b7a8a04abffd7cdd3ca0f88f9c464d80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edbdc54189993b91213663d8a8dab00acf56a6cb73258814b125f50aa1832f12"} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3"} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011e8c0067916fc39c0e8a3d215ae854b7a8a04abffd7cdd3ca0f88f9c464d80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011e8c0067916fc39c0e8a3d215ae854b7a8a04abffd7cdd3ca0f88f9c464d80"} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"011e8c0067916fc39c0e8a3d215ae854b7a8a04abffd7cdd3ca0f88f9c464d80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a03429df9bd2601858072fdb152bba490d8e81bdd889b10dedfd5803da1b5d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3"} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a03429df9bd2601858072fdb152bba490d8e81bdd889b10dedfd5803da1b5d0"} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a03429df9bd2601858072fdb152bba490d8e81bdd889b10dedfd5803da1b5d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a03429df9bd2601858072fdb152bba490d8e81bdd889b10dedfd5803da1b5d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a03429df9bd2601858072fdb152bba490d8e81bdd889b10dedfd5803da1b5d0"} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a03429df9bd2601858072fdb152bba490d8e81bdd889b10dedfd5803da1b5d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a03429df9bd2601858072fdb152bba490d8e81bdd889b10dedfd5803da1b5d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a03429df9bd2601858072fdb152bba490d8e81bdd889b10dedfd5803da1b5d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a03429df9bd2601858072fdb152bba490d8e81bdd889b10dedfd5803da1b5d0"} {"level":"error","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6a03429df9bd2601858072fdb152bba490d8e81bdd889b10dedfd5803da1b5d0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6a03429df9bd2601858072fdb152bba490d8e81bdd889b10dedfd5803da1b5d0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a03429df9bd2601858072fdb152bba490d8e81bdd889b10dedfd5803da1b5d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a03429df9bd2601858072fdb152bba490d8e81bdd889b10dedfd5803da1b5d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a03429df9bd2601858072fdb152bba490d8e81bdd889b10dedfd5803da1b5d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a03429df9bd2601858072fdb152bba490d8e81bdd889b10dedfd5803da1b5d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a03429df9bd2601858072fdb152bba490d8e81bdd889b10dedfd5803da1b5d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a03429df9bd2601858072fdb152bba490d8e81bdd889b10dedfd5803da1b5d0"} {"level":"error","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6a03429df9bd2601858072fdb152bba490d8e81bdd889b10dedfd5803da1b5d0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6a03429df9bd2601858072fdb152bba490d8e81bdd889b10dedfd5803da1b5d0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4341c6baa3d91a0858bc335b0f3ebc2f84cd2b237150a86aab6d62c8e779451f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4341c6baa3d91a0858bc335b0f3ebc2f84cd2b237150a86aab6d62c8e779451f"} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4341c6baa3d91a0858bc335b0f3ebc2f84cd2b237150a86aab6d62c8e779451f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a03429df9bd2601858072fdb152bba490d8e81bdd889b10dedfd5803da1b5d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4341c6baa3d91a0858bc335b0f3ebc2f84cd2b237150a86aab6d62c8e779451f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4341c6baa3d91a0858bc335b0f3ebc2f84cd2b237150a86aab6d62c8e779451f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4341c6baa3d91a0858bc335b0f3ebc2f84cd2b237150a86aab6d62c8e779451f"} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4341c6baa3d91a0858bc335b0f3ebc2f84cd2b237150a86aab6d62c8e779451f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4341c6baa3d91a0858bc335b0f3ebc2f84cd2b237150a86aab6d62c8e779451f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4341c6baa3d91a0858bc335b0f3ebc2f84cd2b237150a86aab6d62c8e779451f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4341c6baa3d91a0858bc335b0f3ebc2f84cd2b237150a86aab6d62c8e779451f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4341c6baa3d91a0858bc335b0f3ebc2f84cd2b237150a86aab6d62c8e779451f"} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4341c6baa3d91a0858bc335b0f3ebc2f84cd2b237150a86aab6d62c8e779451f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4341c6baa3d91a0858bc335b0f3ebc2f84cd2b237150a86aab6d62c8e779451f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"323b7c87b1d7658e9943638f96f6c539b43703542138048adb73a6954df9f647","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4341c6baa3d91a0858bc335b0f3ebc2f84cd2b237150a86aab6d62c8e779451f"} {"level":"info","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"323b7c87b1d7658e9943638f96f6c539b43703542138048adb73a6954df9f647","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/323b7c87b1d7658e9943638f96f6c539b43703542138048adb73a6954df9f647"} {"level":"debug","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4341c6baa3d91a0858bc335b0f3ebc2f84cd2b237150a86aab6d62c8e779451f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4341c6baa3d91a0858bc335b0f3ebc2f84cd2b237150a86aab6d62c8e779451f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/323b7c87b1d7658e9943638f96f6c539b43703542138048adb73a6954df9f647"} {"level":"info","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4341c6baa3d91a0858bc335b0f3ebc2f84cd2b237150a86aab6d62c8e779451f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"323b7c87b1d7658e9943638f96f6c539b43703542138048adb73a6954df9f647","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["323b7c87b1d7658e9943638f96f6c539b43703542138048adb73a6954df9f647"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4341c6baa3d91a0858bc335b0f3ebc2f84cd2b237150a86aab6d62c8e779451f"} {"level":"info","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126"} {"level":"info","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"323b7c87b1d7658e9943638f96f6c539b43703542138048adb73a6954df9f647","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4341c6baa3d91a0858bc335b0f3ebc2f84cd2b237150a86aab6d62c8e779451f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/323b7c87b1d7658e9943638f96f6c539b43703542138048adb73a6954df9f647"} {"level":"info","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"323b7c87b1d7658e9943638f96f6c539b43703542138048adb73a6954df9f647","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126"} {"level":"info","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a4b53a5d11fa8752042503b2609c68dc123b95b28838ce129fc28f0b417ca1"} {"level":"info","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a4b53a5d11fa8752042503b2609c68dc123b95b28838ce129fc28f0b417ca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06a4b53a5d11fa8752042503b2609c68dc123b95b28838ce129fc28f0b417ca1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126"} {"level":"info","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a4b53a5d11fa8752042503b2609c68dc123b95b28838ce129fc28f0b417ca1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a4b53a5d11fa8752042503b2609c68dc123b95b28838ce129fc28f0b417ca1"} {"level":"info","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a4b53a5d11fa8752042503b2609c68dc123b95b28838ce129fc28f0b417ca1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126"} {"level":"info","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126"} {"level":"info","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126"} {"level":"error","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe78ed315194f8e65805b8d98cca28474fbd6391e0c062d32ccd3f4b43f48d20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe78ed315194f8e65805b8d98cca28474fbd6391e0c062d32ccd3f4b43f48d20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe78ed315194f8e65805b8d98cca28474fbd6391e0c062d32ccd3f4b43f48d20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe78ed315194f8e65805b8d98cca28474fbd6391e0c062d32ccd3f4b43f48d20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe78ed315194f8e65805b8d98cca28474fbd6391e0c062d32ccd3f4b43f48d20"} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe78ed315194f8e65805b8d98cca28474fbd6391e0c062d32ccd3f4b43f48d20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe78ed315194f8e65805b8d98cca28474fbd6391e0c062d32ccd3f4b43f48d20"} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe78ed315194f8e65805b8d98cca28474fbd6391e0c062d32ccd3f4b43f48d20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe78ed315194f8e65805b8d98cca28474fbd6391e0c062d32ccd3f4b43f48d20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe78ed315194f8e65805b8d98cca28474fbd6391e0c062d32ccd3f4b43f48d20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe78ed315194f8e65805b8d98cca28474fbd6391e0c062d32ccd3f4b43f48d20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe78ed315194f8e65805b8d98cca28474fbd6391e0c062d32ccd3f4b43f48d20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe78ed315194f8e65805b8d98cca28474fbd6391e0c062d32ccd3f4b43f48d20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe78ed315194f8e65805b8d98cca28474fbd6391e0c062d32ccd3f4b43f48d20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe78ed315194f8e65805b8d98cca28474fbd6391e0c062d32ccd3f4b43f48d20"} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe78ed315194f8e65805b8d98cca28474fbd6391e0c062d32ccd3f4b43f48d20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe78ed315194f8e65805b8d98cca28474fbd6391e0c062d32ccd3f4b43f48d20"} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe78ed315194f8e65805b8d98cca28474fbd6391e0c062d32ccd3f4b43f48d20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe78ed315194f8e65805b8d98cca28474fbd6391e0c062d32ccd3f4b43f48d20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe78ed315194f8e65805b8d98cca28474fbd6391e0c062d32ccd3f4b43f48d20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe78ed315194f8e65805b8d98cca28474fbd6391e0c062d32ccd3f4b43f48d20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe78ed315194f8e65805b8d98cca28474fbd6391e0c062d32ccd3f4b43f48d20"} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e670f42ec80f62c0d934c4576716d98c1c8947dbef286afa0503a85b9d4d88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e670f42ec80f62c0d934c4576716d98c1c8947dbef286afa0503a85b9d4d88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14e670f42ec80f62c0d934c4576716d98c1c8947dbef286afa0503a85b9d4d88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14e670f42ec80f62c0d934c4576716d98c1c8947dbef286afa0503a85b9d4d88","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e670f42ec80f62c0d934c4576716d98c1c8947dbef286afa0503a85b9d4d88"} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14e670f42ec80f62c0d934c4576716d98c1c8947dbef286afa0503a85b9d4d88","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e670f42ec80f62c0d934c4576716d98c1c8947dbef286afa0503a85b9d4d88"} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e670f42ec80f62c0d934c4576716d98c1c8947dbef286afa0503a85b9d4d88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14e670f42ec80f62c0d934c4576716d98c1c8947dbef286afa0503a85b9d4d88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e670f42ec80f62c0d934c4576716d98c1c8947dbef286afa0503a85b9d4d88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52230aabaab09cfb7513ef55a7ad4959e24ef04a143562c9f66b569105a68c29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52230aabaab09cfb7513ef55a7ad4959e24ef04a143562c9f66b569105a68c29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14e670f42ec80f62c0d934c4576716d98c1c8947dbef286afa0503a85b9d4d88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52230aabaab09cfb7513ef55a7ad4959e24ef04a143562c9f66b569105a68c29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52230aabaab09cfb7513ef55a7ad4959e24ef04a143562c9f66b569105a68c29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52230aabaab09cfb7513ef55a7ad4959e24ef04a143562c9f66b569105a68c29"} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52230aabaab09cfb7513ef55a7ad4959e24ef04a143562c9f66b569105a68c29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52230aabaab09cfb7513ef55a7ad4959e24ef04a143562c9f66b569105a68c29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e670f42ec80f62c0d934c4576716d98c1c8947dbef286afa0503a85b9d4d88"} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52230aabaab09cfb7513ef55a7ad4959e24ef04a143562c9f66b569105a68c29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52230aabaab09cfb7513ef55a7ad4959e24ef04a143562c9f66b569105a68c29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52230aabaab09cfb7513ef55a7ad4959e24ef04a143562c9f66b569105a68c29"} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52230aabaab09cfb7513ef55a7ad4959e24ef04a143562c9f66b569105a68c29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52230aabaab09cfb7513ef55a7ad4959e24ef04a143562c9f66b569105a68c29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52230aabaab09cfb7513ef55a7ad4959e24ef04a143562c9f66b569105a68c29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52230aabaab09cfb7513ef55a7ad4959e24ef04a143562c9f66b569105a68c29"} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5abe08a30447c9e3c02828c8a2b0d1733912d6ba5f3177520a8604438443516e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5abe08a30447c9e3c02828c8a2b0d1733912d6ba5f3177520a8604438443516e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52230aabaab09cfb7513ef55a7ad4959e24ef04a143562c9f66b569105a68c29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5abe08a30447c9e3c02828c8a2b0d1733912d6ba5f3177520a8604438443516e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52230aabaab09cfb7513ef55a7ad4959e24ef04a143562c9f66b569105a68c29"} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5abe08a30447c9e3c02828c8a2b0d1733912d6ba5f3177520a8604438443516e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5abe08a30447c9e3c02828c8a2b0d1733912d6ba5f3177520a8604438443516e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5abe08a30447c9e3c02828c8a2b0d1733912d6ba5f3177520a8604438443516e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5abe08a30447c9e3c02828c8a2b0d1733912d6ba5f3177520a8604438443516e"} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52230aabaab09cfb7513ef55a7ad4959e24ef04a143562c9f66b569105a68c29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52230aabaab09cfb7513ef55a7ad4959e24ef04a143562c9f66b569105a68c29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5abe08a30447c9e3c02828c8a2b0d1733912d6ba5f3177520a8604438443516e"} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52230aabaab09cfb7513ef55a7ad4959e24ef04a143562c9f66b569105a68c29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5abe08a30447c9e3c02828c8a2b0d1733912d6ba5f3177520a8604438443516e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5abe08a30447c9e3c02828c8a2b0d1733912d6ba5f3177520a8604438443516e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5abe08a30447c9e3c02828c8a2b0d1733912d6ba5f3177520a8604438443516e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52230aabaab09cfb7513ef55a7ad4959e24ef04a143562c9f66b569105a68c29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52230aabaab09cfb7513ef55a7ad4959e24ef04a143562c9f66b569105a68c29"} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52230aabaab09cfb7513ef55a7ad4959e24ef04a143562c9f66b569105a68c29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5abe08a30447c9e3c02828c8a2b0d1733912d6ba5f3177520a8604438443516e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5abe08a30447c9e3c02828c8a2b0d1733912d6ba5f3177520a8604438443516e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9c0fd9031a3f7cc203b79345fef9af53ae61ca534c391388e92500e82ed256d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5abe08a30447c9e3c02828c8a2b0d1733912d6ba5f3177520a8604438443516e"} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9c0fd9031a3f7cc203b79345fef9af53ae61ca534c391388e92500e82ed256d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52230aabaab09cfb7513ef55a7ad4959e24ef04a143562c9f66b569105a68c29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52230aabaab09cfb7513ef55a7ad4959e24ef04a143562c9f66b569105a68c29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9c0fd9031a3f7cc203b79345fef9af53ae61ca534c391388e92500e82ed256d"} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52230aabaab09cfb7513ef55a7ad4959e24ef04a143562c9f66b569105a68c29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57efed79663fa0dd26dfab1eb1f017a6cf3379141cd3107e0d9e2ace071d59f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57efed79663fa0dd26dfab1eb1f017a6cf3379141cd3107e0d9e2ace071d59f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5abe08a30447c9e3c02828c8a2b0d1733912d6ba5f3177520a8604438443516e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5abe08a30447c9e3c02828c8a2b0d1733912d6ba5f3177520a8604438443516e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52230aabaab09cfb7513ef55a7ad4959e24ef04a143562c9f66b569105a68c29"} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5abe08a30447c9e3c02828c8a2b0d1733912d6ba5f3177520a8604438443516e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9c0fd9031a3f7cc203b79345fef9af53ae61ca534c391388e92500e82ed256d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9c0fd9031a3f7cc203b79345fef9af53ae61ca534c391388e92500e82ed256d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57efed79663fa0dd26dfab1eb1f017a6cf3379141cd3107e0d9e2ace071d59f8"} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9c0fd9031a3f7cc203b79345fef9af53ae61ca534c391388e92500e82ed256d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52230aabaab09cfb7513ef55a7ad4959e24ef04a143562c9f66b569105a68c29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57efed79663fa0dd26dfab1eb1f017a6cf3379141cd3107e0d9e2ace071d59f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57efed79663fa0dd26dfab1eb1f017a6cf3379141cd3107e0d9e2ace071d59f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57efed79663fa0dd26dfab1eb1f017a6cf3379141cd3107e0d9e2ace071d59f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5abe08a30447c9e3c02828c8a2b0d1733912d6ba5f3177520a8604438443516e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5abe08a30447c9e3c02828c8a2b0d1733912d6ba5f3177520a8604438443516e"} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5abe08a30447c9e3c02828c8a2b0d1733912d6ba5f3177520a8604438443516e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9c0fd9031a3f7cc203b79345fef9af53ae61ca534c391388e92500e82ed256d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9c0fd9031a3f7cc203b79345fef9af53ae61ca534c391388e92500e82ed256d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57efed79663fa0dd26dfab1eb1f017a6cf3379141cd3107e0d9e2ace071d59f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5abe08a30447c9e3c02828c8a2b0d1733912d6ba5f3177520a8604438443516e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5abe08a30447c9e3c02828c8a2b0d1733912d6ba5f3177520a8604438443516e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9c0fd9031a3f7cc203b79345fef9af53ae61ca534c391388e92500e82ed256d"} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5abe08a30447c9e3c02828c8a2b0d1733912d6ba5f3177520a8604438443516e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9c0fd9031a3f7cc203b79345fef9af53ae61ca534c391388e92500e82ed256d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9c0fd9031a3f7cc203b79345fef9af53ae61ca534c391388e92500e82ed256d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52230aabaab09cfb7513ef55a7ad4959e24ef04a143562c9f66b569105a68c29"} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9c0fd9031a3f7cc203b79345fef9af53ae61ca534c391388e92500e82ed256d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5abe08a30447c9e3c02828c8a2b0d1733912d6ba5f3177520a8604438443516e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9c0fd9031a3f7cc203b79345fef9af53ae61ca534c391388e92500e82ed256d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57efed79663fa0dd26dfab1eb1f017a6cf3379141cd3107e0d9e2ace071d59f8"} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"931f17250177d6c1378ddd430bbadfa912fd44afe3652887b8fa08a87d9b8993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5abe08a30447c9e3c02828c8a2b0d1733912d6ba5f3177520a8604438443516e"} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"931f17250177d6c1378ddd430bbadfa912fd44afe3652887b8fa08a87d9b8993","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"931f17250177d6c1378ddd430bbadfa912fd44afe3652887b8fa08a87d9b8993","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"931f17250177d6c1378ddd430bbadfa912fd44afe3652887b8fa08a87d9b8993","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9c0fd9031a3f7cc203b79345fef9af53ae61ca534c391388e92500e82ed256d"} {"level":"debug","ts":"2026-07-07T18:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"931f17250177d6c1378ddd430bbadfa912fd44afe3652887b8fa08a87d9b8993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"931f17250177d6c1378ddd430bbadfa912fd44afe3652887b8fa08a87d9b8993","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/931f17250177d6c1378ddd430bbadfa912fd44afe3652887b8fa08a87d9b8993"} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"931f17250177d6c1378ddd430bbadfa912fd44afe3652887b8fa08a87d9b8993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["931f17250177d6c1378ddd430bbadfa912fd44afe3652887b8fa08a87d9b8993"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"931f17250177d6c1378ddd430bbadfa912fd44afe3652887b8fa08a87d9b8993","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"931f17250177d6c1378ddd430bbadfa912fd44afe3652887b8fa08a87d9b8993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/931f17250177d6c1378ddd430bbadfa912fd44afe3652887b8fa08a87d9b8993"} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"931f17250177d6c1378ddd430bbadfa912fd44afe3652887b8fa08a87d9b8993","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"931f17250177d6c1378ddd430bbadfa912fd44afe3652887b8fa08a87d9b8993","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"931f17250177d6c1378ddd430bbadfa912fd44afe3652887b8fa08a87d9b8993","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/931f17250177d6c1378ddd430bbadfa912fd44afe3652887b8fa08a87d9b8993"} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"931f17250177d6c1378ddd430bbadfa912fd44afe3652887b8fa08a87d9b8993","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/931f17250177d6c1378ddd430bbadfa912fd44afe3652887b8fa08a87d9b8993"} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015"} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"931f17250177d6c1378ddd430bbadfa912fd44afe3652887b8fa08a87d9b8993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["931f17250177d6c1378ddd430bbadfa912fd44afe3652887b8fa08a87d9b8993"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015"} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"931f17250177d6c1378ddd430bbadfa912fd44afe3652887b8fa08a87d9b8993","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"931f17250177d6c1378ddd430bbadfa912fd44afe3652887b8fa08a87d9b8993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"931f17250177d6c1378ddd430bbadfa912fd44afe3652887b8fa08a87d9b8993","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"931f17250177d6c1378ddd430bbadfa912fd44afe3652887b8fa08a87d9b8993","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"931f17250177d6c1378ddd430bbadfa912fd44afe3652887b8fa08a87d9b8993","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e16092c9e295b288e4edecbccd8be3273ee5a60b05c56fb8aa879bbb966014a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/931f17250177d6c1378ddd430bbadfa912fd44afe3652887b8fa08a87d9b8993"} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e16092c9e295b288e4edecbccd8be3273ee5a60b05c56fb8aa879bbb966014a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14cb9390b0cc79da66b64c73776a46872f13144f3d3a665c269b3c4cbfac002c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e16092c9e295b288e4edecbccd8be3273ee5a60b05c56fb8aa879bbb966014a"} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14cb9390b0cc79da66b64c73776a46872f13144f3d3a665c269b3c4cbfac002c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e16092c9e295b288e4edecbccd8be3273ee5a60b05c56fb8aa879bbb966014a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e16092c9e295b288e4edecbccd8be3273ee5a60b05c56fb8aa879bbb966014a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e16092c9e295b288e4edecbccd8be3273ee5a60b05c56fb8aa879bbb966014a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"931f17250177d6c1378ddd430bbadfa912fd44afe3652887b8fa08a87d9b8993","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e8202bbfcfb0fec62dbb5d0b3c128415446a5ed9f476fb0f0f93ceb305d1219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/931f17250177d6c1378ddd430bbadfa912fd44afe3652887b8fa08a87d9b8993"} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e8202bbfcfb0fec62dbb5d0b3c128415446a5ed9f476fb0f0f93ceb305d1219","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14cb9390b0cc79da66b64c73776a46872f13144f3d3a665c269b3c4cbfac002c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14cb9390b0cc79da66b64c73776a46872f13144f3d3a665c269b3c4cbfac002c"} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14cb9390b0cc79da66b64c73776a46872f13144f3d3a665c269b3c4cbfac002c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e16092c9e295b288e4edecbccd8be3273ee5a60b05c56fb8aa879bbb966014a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e16092c9e295b288e4edecbccd8be3273ee5a60b05c56fb8aa879bbb966014a"} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e16092c9e295b288e4edecbccd8be3273ee5a60b05c56fb8aa879bbb966014a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e8202bbfcfb0fec62dbb5d0b3c128415446a5ed9f476fb0f0f93ceb305d1219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e8202bbfcfb0fec62dbb5d0b3c128415446a5ed9f476fb0f0f93ceb305d1219"} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e8202bbfcfb0fec62dbb5d0b3c128415446a5ed9f476fb0f0f93ceb305d1219","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14cb9390b0cc79da66b64c73776a46872f13144f3d3a665c269b3c4cbfac002c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"931f17250177d6c1378ddd430bbadfa912fd44afe3652887b8fa08a87d9b8993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["931f17250177d6c1378ddd430bbadfa912fd44afe3652887b8fa08a87d9b8993"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14cb9390b0cc79da66b64c73776a46872f13144f3d3a665c269b3c4cbfac002c"} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"931f17250177d6c1378ddd430bbadfa912fd44afe3652887b8fa08a87d9b8993","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3633783c2a10ac7fd33378e285dcc3cc7aeeae9f9efeef17b6a024241674f629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015"} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3633783c2a10ac7fd33378e285dcc3cc7aeeae9f9efeef17b6a024241674f629","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e16092c9e295b288e4edecbccd8be3273ee5a60b05c56fb8aa879bbb966014a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e16092c9e295b288e4edecbccd8be3273ee5a60b05c56fb8aa879bbb966014a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3633783c2a10ac7fd33378e285dcc3cc7aeeae9f9efeef17b6a024241674f629"} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e16092c9e295b288e4edecbccd8be3273ee5a60b05c56fb8aa879bbb966014a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e8202bbfcfb0fec62dbb5d0b3c128415446a5ed9f476fb0f0f93ceb305d1219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e8202bbfcfb0fec62dbb5d0b3c128415446a5ed9f476fb0f0f93ceb305d1219"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e8202bbfcfb0fec62dbb5d0b3c128415446a5ed9f476fb0f0f93ceb305d1219","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"931f17250177d6c1378ddd430bbadfa912fd44afe3652887b8fa08a87d9b8993","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14cb9390b0cc79da66b64c73776a46872f13144f3d3a665c269b3c4cbfac002c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14cb9390b0cc79da66b64c73776a46872f13144f3d3a665c269b3c4cbfac002c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e16092c9e295b288e4edecbccd8be3273ee5a60b05c56fb8aa879bbb966014a"} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14cb9390b0cc79da66b64c73776a46872f13144f3d3a665c269b3c4cbfac002c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3633783c2a10ac7fd33378e285dcc3cc7aeeae9f9efeef17b6a024241674f629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:17:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3633783c2a10ac7fd33378e285dcc3cc7aeeae9f9efeef17b6a024241674f629"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e8202bbfcfb0fec62dbb5d0b3c128415446a5ed9f476fb0f0f93ceb305d1219"} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3633783c2a10ac7fd33378e285dcc3cc7aeeae9f9efeef17b6a024241674f629","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e16092c9e295b288e4edecbccd8be3273ee5a60b05c56fb8aa879bbb966014a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e8202bbfcfb0fec62dbb5d0b3c128415446a5ed9f476fb0f0f93ceb305d1219","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14cb9390b0cc79da66b64c73776a46872f13144f3d3a665c269b3c4cbfac002c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3633783c2a10ac7fd33378e285dcc3cc7aeeae9f9efeef17b6a024241674f629","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/931f17250177d6c1378ddd430bbadfa912fd44afe3652887b8fa08a87d9b8993"} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015"} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3633783c2a10ac7fd33378e285dcc3cc7aeeae9f9efeef17b6a024241674f629"} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e16092c9e295b288e4edecbccd8be3273ee5a60b05c56fb8aa879bbb966014a"} {"level":"info","ts":"2026-07-07T18:17:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14cb9390b0cc79da66b64c73776a46872f13144f3d3a665c269b3c4cbfac002c"} {"level":"info","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"abe0d3a8-66a7-40da-8e40-4ab049609567","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49578","PortSpecifier":{"PortValue":49578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"abe0d3a8-66a7-40da-8e40-4ab049609567","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"abe0d3a8-66a7-40da-8e40-4ab049609567","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49578","PortSpecifier":{"PortValue":49578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448239,"nanos":149055960},"http":{"id":"abe0d3a8-66a7-40da-8e40-4ab049609567","method":"POST","headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"abe0d3a8-66a7-40da-8e40-4ab049609567","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"abe0d3a8-66a7-40da-8e40-4ab049609567","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"]}} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"abe0d3a8-66a7-40da-8e40-4ab049609567","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abe0d3a8-66a7-40da-8e40-4ab049609567","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abe0d3a8-66a7-40da-8e40-4ab049609567","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abe0d3a8-66a7-40da-8e40-4ab049609567","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a68ed4/auth-test-model-a68ed4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"abe0d3a8-66a7-40da-8e40-4ab049609567","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abe0d3a8-66a7-40da-8e40-4ab049609567","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abe0d3a8-66a7-40da-8e40-4ab049609567","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"abe0d3a8-66a7-40da-8e40-4ab049609567","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"abe0d3a8-66a7-40da-8e40-4ab049609567","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f4a8a7f-b10d-47be-bbf1-5a430db75b9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36566","PortSpecifier":{"PortValue":36566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9f4a8a7f-b10d-47be-bbf1-5a430db75b9a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f4a8a7f-b10d-47be-bbf1-5a430db75b9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36566","PortSpecifier":{"PortValue":36566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448239,"nanos":215227468},"http":{"id":"9f4a8a7f-b10d-47be-bbf1-5a430db75b9a","method":"POST","headers":{":authority":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9f4a8a7f-b10d-47be-bbf1-5a430db75b9a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9f4a8a7f-b10d-47be-bbf1-5a430db75b9a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"]}} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9f4a8a7f-b10d-47be-bbf1-5a430db75b9a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f4a8a7f-b10d-47be-bbf1-5a430db75b9a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f4a8a7f-b10d-47be-bbf1-5a430db75b9a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f4a8a7f-b10d-47be-bbf1-5a430db75b9a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bc5a1a/auth-test-model-bc5a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9f4a8a7f-b10d-47be-bbf1-5a430db75b9a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f4a8a7f-b10d-47be-bbf1-5a430db75b9a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f4a8a7f-b10d-47be-bbf1-5a430db75b9a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f4a8a7f-b10d-47be-bbf1-5a430db75b9a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f4a8a7f-b10d-47be-bbf1-5a430db75b9a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efecb5e2-b0e4-4c6d-93b3-12dad6e8c823","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49592","PortSpecifier":{"PortValue":49592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"efecb5e2-b0e4-4c6d-93b3-12dad6e8c823","method":"GET","path":"/maas-api/v1/api-keys/e994f3f6-6a78-4ca7-805f-762220da068f","host":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efecb5e2-b0e4-4c6d-93b3-12dad6e8c823","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49592","PortSpecifier":{"PortValue":49592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448239,"nanos":304584865},"http":{"id":"efecb5e2-b0e4-4c6d-93b3-12dad6e8c823","method":"GET","headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e994f3f6-6a78-4ca7-805f-762220da068f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"efecb5e2-b0e4-4c6d-93b3-12dad6e8c823","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"efecb5e2-b0e4-4c6d-93b3-12dad6e8c823","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"]}} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"efecb5e2-b0e4-4c6d-93b3-12dad6e8c823","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e994f3f6-6a78-4ca7-805f-762220da068f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efecb5e2-b0e4-4c6d-93b3-12dad6e8c823","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efecb5e2-b0e4-4c6d-93b3-12dad6e8c823","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efecb5e2-b0e4-4c6d-93b3-12dad6e8c823","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a68ed4/auth-test-model-a68ed4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"efecb5e2-b0e4-4c6d-93b3-12dad6e8c823","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efecb5e2-b0e4-4c6d-93b3-12dad6e8c823","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efecb5e2-b0e4-4c6d-93b3-12dad6e8c823","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efecb5e2-b0e4-4c6d-93b3-12dad6e8c823","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efecb5e2-b0e4-4c6d-93b3-12dad6e8c823","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"336e5942-30e3-4e46-a94f-7012ab7761f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36568","PortSpecifier":{"PortValue":36568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"336e5942-30e3-4e46-a94f-7012ab7761f1","method":"GET","path":"/maas-api/v1/api-keys/a5de747f-9069-45b9-9158-25b33f08e408","host":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"336e5942-30e3-4e46-a94f-7012ab7761f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36568","PortSpecifier":{"PortValue":36568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448239,"nanos":345280829},"http":{"id":"336e5942-30e3-4e46-a94f-7012ab7761f1","method":"GET","headers":{":authority":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a5de747f-9069-45b9-9158-25b33f08e408",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"336e5942-30e3-4e46-a94f-7012ab7761f1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"336e5942-30e3-4e46-a94f-7012ab7761f1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"]}} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"336e5942-30e3-4e46-a94f-7012ab7761f1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a5de747f-9069-45b9-9158-25b33f08e408",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"336e5942-30e3-4e46-a94f-7012ab7761f1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"336e5942-30e3-4e46-a94f-7012ab7761f1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"336e5942-30e3-4e46-a94f-7012ab7761f1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bc5a1a/auth-test-model-bc5a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"336e5942-30e3-4e46-a94f-7012ab7761f1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"336e5942-30e3-4e46-a94f-7012ab7761f1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"336e5942-30e3-4e46-a94f-7012ab7761f1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"336e5942-30e3-4e46-a94f-7012ab7761f1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:17:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"336e5942-30e3-4e46-a94f-7012ab7761f1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20dd08f4-c46d-4629-b1e1-ddcd0ece76fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51886","PortSpecifier":{"PortValue":51886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"20dd08f4-c46d-4629-b1e1-ddcd0ece76fd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20dd08f4-c46d-4629-b1e1-ddcd0ece76fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51886","PortSpecifier":{"PortValue":51886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448256,"nanos":591460031},"http":{"id":"20dd08f4-c46d-4629-b1e1-ddcd0ece76fd","method":"POST","headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"20dd08f4-c46d-4629-b1e1-ddcd0ece76fd","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"20dd08f4-c46d-4629-b1e1-ddcd0ece76fd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"]}} {"level":"debug","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"20dd08f4-c46d-4629-b1e1-ddcd0ece76fd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20dd08f4-c46d-4629-b1e1-ddcd0ece76fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20dd08f4-c46d-4629-b1e1-ddcd0ece76fd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20dd08f4-c46d-4629-b1e1-ddcd0ece76fd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a68ed4/auth-test-model-a68ed4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"20dd08f4-c46d-4629-b1e1-ddcd0ece76fd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20dd08f4-c46d-4629-b1e1-ddcd0ece76fd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20dd08f4-c46d-4629-b1e1-ddcd0ece76fd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20dd08f4-c46d-4629-b1e1-ddcd0ece76fd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20dd08f4-c46d-4629-b1e1-ddcd0ece76fd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eff75ada-f749-4907-86e4-5c6c04a38af7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34866","PortSpecifier":{"PortValue":34866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eff75ada-f749-4907-86e4-5c6c04a38af7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eff75ada-f749-4907-86e4-5c6c04a38af7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34866","PortSpecifier":{"PortValue":34866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448256,"nanos":631259823},"http":{"id":"eff75ada-f749-4907-86e4-5c6c04a38af7","method":"POST","headers":{":authority":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eff75ada-f749-4907-86e4-5c6c04a38af7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eff75ada-f749-4907-86e4-5c6c04a38af7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"]}} {"level":"debug","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eff75ada-f749-4907-86e4-5c6c04a38af7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eff75ada-f749-4907-86e4-5c6c04a38af7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eff75ada-f749-4907-86e4-5c6c04a38af7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eff75ada-f749-4907-86e4-5c6c04a38af7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bc5a1a/auth-test-model-bc5a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eff75ada-f749-4907-86e4-5c6c04a38af7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eff75ada-f749-4907-86e4-5c6c04a38af7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eff75ada-f749-4907-86e4-5c6c04a38af7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eff75ada-f749-4907-86e4-5c6c04a38af7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eff75ada-f749-4907-86e4-5c6c04a38af7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5eb7ef8-2f90-4dfe-997f-9b57967faf5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51894","PortSpecifier":{"PortValue":51894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d5eb7ef8-2f90-4dfe-997f-9b57967faf5b","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5eb7ef8-2f90-4dfe-997f-9b57967faf5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51894","PortSpecifier":{"PortValue":51894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448256,"nanos":683527022},"http":{"id":"d5eb7ef8-2f90-4dfe-997f-9b57967faf5b","method":"GET","headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d5eb7ef8-2f90-4dfe-997f-9b57967faf5b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1e2MQiGsu8FyaRzbJ_we1IUdiHW7KzGl8MZQrnPffJmbORfEhDftFNLtqrLh8"} {"level":"debug","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d5eb7ef8-2f90-4dfe-997f-9b57967faf5b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a68ed4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1e2MQiGsu8FyaRzbJ_we1IUdiHW7KzGl8MZQrnPffJmbORfEhDftFNLtqrLh8\"}"} {"level":"debug","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d5eb7ef8-2f90-4dfe-997f-9b57967faf5b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a68ed4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"13f80fb0-c230-4d79-b6da-f21d36b054be","keyName":"e2e-auth-iso-a-d73ad8","subscription":"e2e-auth-iso-e5862a","tenant":"e2e-shared-a-a68ed4","userId":"13f80fb0-c230-4d79-b6da-f21d36b054be","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d5eb7ef8-2f90-4dfe-997f-9b57967faf5b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5eb7ef8-2f90-4dfe-997f-9b57967faf5b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5eb7ef8-2f90-4dfe-997f-9b57967faf5b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5eb7ef8-2f90-4dfe-997f-9b57967faf5b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a68ed4/auth-test-model-a68ed4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5eb7ef8-2f90-4dfe-997f-9b57967faf5b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5eb7ef8-2f90-4dfe-997f-9b57967faf5b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-e5862a"} {"level":"debug","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5eb7ef8-2f90-4dfe-997f-9b57967faf5b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d5eb7ef8-2f90-4dfe-997f-9b57967faf5b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5eb7ef8-2f90-4dfe-997f-9b57967faf5b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:17:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5eb7ef8-2f90-4dfe-997f-9b57967faf5b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:17:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbe29e31-9640-4429-9640-7d94c571f81c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53802","PortSpecifier":{"PortValue":53802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fbe29e31-9640-4429-9640-7d94c571f81c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:17:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbe29e31-9640-4429-9640-7d94c571f81c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53802","PortSpecifier":{"PortValue":53802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448273,"nanos":870883199},"http":{"id":"fbe29e31-9640-4429-9640-7d94c571f81c","method":"POST","headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:17:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fbe29e31-9640-4429-9640-7d94c571f81c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T18:17:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fbe29e31-9640-4429-9640-7d94c571f81c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"]}} {"level":"debug","ts":"2026-07-07T18:17:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fbe29e31-9640-4429-9640-7d94c571f81c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:17:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbe29e31-9640-4429-9640-7d94c571f81c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:17:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbe29e31-9640-4429-9640-7d94c571f81c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:17:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbe29e31-9640-4429-9640-7d94c571f81c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a68ed4/auth-test-model-a68ed4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:17:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fbe29e31-9640-4429-9640-7d94c571f81c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T18:17:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbe29e31-9640-4429-9640-7d94c571f81c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T18:17:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbe29e31-9640-4429-9640-7d94c571f81c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T18:17:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbe29e31-9640-4429-9640-7d94c571f81c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:17:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbe29e31-9640-4429-9640-7d94c571f81c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:17:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9bc28f2-0da7-4a68-b0eb-625abe5bd5f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51848","PortSpecifier":{"PortValue":51848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d9bc28f2-0da7-4a68-b0eb-625abe5bd5f7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:17:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9bc28f2-0da7-4a68-b0eb-625abe5bd5f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51848","PortSpecifier":{"PortValue":51848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448273,"nanos":910167156},"http":{"id":"d9bc28f2-0da7-4a68-b0eb-625abe5bd5f7","method":"POST","headers":{":authority":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:17:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d9bc28f2-0da7-4a68-b0eb-625abe5bd5f7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T18:17:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d9bc28f2-0da7-4a68-b0eb-625abe5bd5f7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"]}} {"level":"debug","ts":"2026-07-07T18:17:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d9bc28f2-0da7-4a68-b0eb-625abe5bd5f7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:17:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9bc28f2-0da7-4a68-b0eb-625abe5bd5f7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:17:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9bc28f2-0da7-4a68-b0eb-625abe5bd5f7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:17:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9bc28f2-0da7-4a68-b0eb-625abe5bd5f7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bc5a1a/auth-test-model-bc5a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:17:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d9bc28f2-0da7-4a68-b0eb-625abe5bd5f7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T18:17:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9bc28f2-0da7-4a68-b0eb-625abe5bd5f7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T18:17:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9bc28f2-0da7-4a68-b0eb-625abe5bd5f7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T18:17:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9bc28f2-0da7-4a68-b0eb-625abe5bd5f7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:17:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9bc28f2-0da7-4a68-b0eb-625abe5bd5f7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:17:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c41c384e-f544-437e-96d3-261dcc34086a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51856","PortSpecifier":{"PortValue":51856}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c41c384e-f544-437e-96d3-261dcc34086a","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:17:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c41c384e-f544-437e-96d3-261dcc34086a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51856","PortSpecifier":{"PortValue":51856}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448273,"nanos":952239086},"http":{"id":"c41c384e-f544-437e-96d3-261dcc34086a","method":"GET","headers":{":authority":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:17:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c41c384e-f544-437e-96d3-261dcc34086a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-90FyPWC8eoXqWvT9_knRouQqLFPBk5EHJnd93xDpUGDvY6ACM8Z4pq5jVxrP"} {"level":"debug","ts":"2026-07-07T18:17:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c41c384e-f544-437e-96d3-261dcc34086a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-bc5a1a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-90FyPWC8eoXqWvT9_knRouQqLFPBk5EHJnd93xDpUGDvY6ACM8Z4pq5jVxrP\"}"} {"level":"debug","ts":"2026-07-07T18:17:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c41c384e-f544-437e-96d3-261dcc34086a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-bc5a1a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-07T18:17:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c41c384e-f544-437e-96d3-261dcc34086a","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:17:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"c41c384e-f544-437e-96d3-261dcc34086a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-07T18:17:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c41c384e-f544-437e-96d3-261dcc34086a","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-07T18:17:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c41c384e-f544-437e-96d3-261dcc34086a","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73c96134-cbf5-466d-949d-0572df808f3b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53852","PortSpecifier":{"PortValue":53852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"73c96134-cbf5-466d-949d-0572df808f3b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73c96134-cbf5-466d-949d-0572df808f3b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53852","PortSpecifier":{"PortValue":53852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448291,"nanos":122135784},"http":{"id":"73c96134-cbf5-466d-949d-0572df808f3b","method":"POST","headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"73c96134-cbf5-466d-949d-0572df808f3b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"73c96134-cbf5-466d-949d-0572df808f3b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"]}} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"73c96134-cbf5-466d-949d-0572df808f3b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73c96134-cbf5-466d-949d-0572df808f3b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73c96134-cbf5-466d-949d-0572df808f3b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73c96134-cbf5-466d-949d-0572df808f3b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a68ed4/auth-test-model-a68ed4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"73c96134-cbf5-466d-949d-0572df808f3b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73c96134-cbf5-466d-949d-0572df808f3b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73c96134-cbf5-466d-949d-0572df808f3b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73c96134-cbf5-466d-949d-0572df808f3b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73c96134-cbf5-466d-949d-0572df808f3b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56a2ec5a-44c4-4396-a1f5-207fbf3a53c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35958","PortSpecifier":{"PortValue":35958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"56a2ec5a-44c4-4396-a1f5-207fbf3a53c3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56a2ec5a-44c4-4396-a1f5-207fbf3a53c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35958","PortSpecifier":{"PortValue":35958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448291,"nanos":158999931},"http":{"id":"56a2ec5a-44c4-4396-a1f5-207fbf3a53c3","method":"POST","headers":{":authority":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"56a2ec5a-44c4-4396-a1f5-207fbf3a53c3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"56a2ec5a-44c4-4396-a1f5-207fbf3a53c3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"]}} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"56a2ec5a-44c4-4396-a1f5-207fbf3a53c3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56a2ec5a-44c4-4396-a1f5-207fbf3a53c3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56a2ec5a-44c4-4396-a1f5-207fbf3a53c3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56a2ec5a-44c4-4396-a1f5-207fbf3a53c3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bc5a1a/auth-test-model-bc5a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"56a2ec5a-44c4-4396-a1f5-207fbf3a53c3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56a2ec5a-44c4-4396-a1f5-207fbf3a53c3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56a2ec5a-44c4-4396-a1f5-207fbf3a53c3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56a2ec5a-44c4-4396-a1f5-207fbf3a53c3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56a2ec5a-44c4-4396-a1f5-207fbf3a53c3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad4fd4b5-174f-4c09-8564-bd460a389b84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53868","PortSpecifier":{"PortValue":53868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ad4fd4b5-174f-4c09-8564-bd460a389b84","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad4fd4b5-174f-4c09-8564-bd460a389b84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53868","PortSpecifier":{"PortValue":53868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448291,"nanos":200665914},"http":{"id":"ad4fd4b5-174f-4c09-8564-bd460a389b84","method":"POST","headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ad4fd4b5-174f-4c09-8564-bd460a389b84","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ad4fd4b5-174f-4c09-8564-bd460a389b84","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"]}} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ad4fd4b5-174f-4c09-8564-bd460a389b84","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad4fd4b5-174f-4c09-8564-bd460a389b84","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad4fd4b5-174f-4c09-8564-bd460a389b84","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad4fd4b5-174f-4c09-8564-bd460a389b84","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a68ed4/auth-test-model-a68ed4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ad4fd4b5-174f-4c09-8564-bd460a389b84","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad4fd4b5-174f-4c09-8564-bd460a389b84","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad4fd4b5-174f-4c09-8564-bd460a389b84","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad4fd4b5-174f-4c09-8564-bd460a389b84","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad4fd4b5-174f-4c09-8564-bd460a389b84","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1091674c-aeb0-4a2e-9b55-6a55b9d62870","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35968","PortSpecifier":{"PortValue":35968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1091674c-aeb0-4a2e-9b55-6a55b9d62870","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1091674c-aeb0-4a2e-9b55-6a55b9d62870","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35968","PortSpecifier":{"PortValue":35968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448291,"nanos":239870600},"http":{"id":"1091674c-aeb0-4a2e-9b55-6a55b9d62870","method":"POST","headers":{":authority":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1091674c-aeb0-4a2e-9b55-6a55b9d62870","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1091674c-aeb0-4a2e-9b55-6a55b9d62870","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"]}} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1091674c-aeb0-4a2e-9b55-6a55b9d62870","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1091674c-aeb0-4a2e-9b55-6a55b9d62870","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1091674c-aeb0-4a2e-9b55-6a55b9d62870","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1091674c-aeb0-4a2e-9b55-6a55b9d62870","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bc5a1a/auth-test-model-bc5a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1091674c-aeb0-4a2e-9b55-6a55b9d62870","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1091674c-aeb0-4a2e-9b55-6a55b9d62870","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1091674c-aeb0-4a2e-9b55-6a55b9d62870","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1091674c-aeb0-4a2e-9b55-6a55b9d62870","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:18:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1091674c-aeb0-4a2e-9b55-6a55b9d62870","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e69ad2d3-aa29-4e67-bbff-78ed83dc01d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46190","PortSpecifier":{"PortValue":46190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e69ad2d3-aa29-4e67-bbff-78ed83dc01d2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e69ad2d3-aa29-4e67-bbff-78ed83dc01d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46190","PortSpecifier":{"PortValue":46190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448310,"nanos":536194674},"http":{"id":"e69ad2d3-aa29-4e67-bbff-78ed83dc01d2","method":"POST","headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e69ad2d3-aa29-4e67-bbff-78ed83dc01d2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e69ad2d3-aa29-4e67-bbff-78ed83dc01d2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"]}} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e69ad2d3-aa29-4e67-bbff-78ed83dc01d2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e69ad2d3-aa29-4e67-bbff-78ed83dc01d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e69ad2d3-aa29-4e67-bbff-78ed83dc01d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e69ad2d3-aa29-4e67-bbff-78ed83dc01d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a68ed4/auth-test-model-a68ed4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e69ad2d3-aa29-4e67-bbff-78ed83dc01d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e69ad2d3-aa29-4e67-bbff-78ed83dc01d2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e69ad2d3-aa29-4e67-bbff-78ed83dc01d2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e69ad2d3-aa29-4e67-bbff-78ed83dc01d2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e69ad2d3-aa29-4e67-bbff-78ed83dc01d2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"859fddda-eb28-458d-963a-754b3c5e764a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37658","PortSpecifier":{"PortValue":37658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"859fddda-eb28-458d-963a-754b3c5e764a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"859fddda-eb28-458d-963a-754b3c5e764a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37658","PortSpecifier":{"PortValue":37658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448310,"nanos":577943049},"http":{"id":"859fddda-eb28-458d-963a-754b3c5e764a","method":"POST","headers":{":authority":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"859fddda-eb28-458d-963a-754b3c5e764a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"859fddda-eb28-458d-963a-754b3c5e764a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"]}} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"859fddda-eb28-458d-963a-754b3c5e764a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"859fddda-eb28-458d-963a-754b3c5e764a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"859fddda-eb28-458d-963a-754b3c5e764a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"859fddda-eb28-458d-963a-754b3c5e764a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bc5a1a/auth-test-model-bc5a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"859fddda-eb28-458d-963a-754b3c5e764a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"859fddda-eb28-458d-963a-754b3c5e764a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"859fddda-eb28-458d-963a-754b3c5e764a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"859fddda-eb28-458d-963a-754b3c5e764a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"859fddda-eb28-458d-963a-754b3c5e764a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0fae6e2-9808-45ec-87bb-b3e0c37740c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37672","PortSpecifier":{"PortValue":37672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d0fae6e2-9808-45ec-87bb-b3e0c37740c6","method":"GET","path":"/maas-api/v1/api-keys/3309f0e3-0e5c-40dd-a049-1f7cd117527e","host":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0fae6e2-9808-45ec-87bb-b3e0c37740c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37672","PortSpecifier":{"PortValue":37672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448310,"nanos":624086151},"http":{"id":"d0fae6e2-9808-45ec-87bb-b3e0c37740c6","method":"GET","headers":{":authority":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3309f0e3-0e5c-40dd-a049-1f7cd117527e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d0fae6e2-9808-45ec-87bb-b3e0c37740c6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d0fae6e2-9808-45ec-87bb-b3e0c37740c6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"]}} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d0fae6e2-9808-45ec-87bb-b3e0c37740c6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3309f0e3-0e5c-40dd-a049-1f7cd117527e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0fae6e2-9808-45ec-87bb-b3e0c37740c6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0fae6e2-9808-45ec-87bb-b3e0c37740c6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0fae6e2-9808-45ec-87bb-b3e0c37740c6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bc5a1a/auth-test-model-bc5a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d0fae6e2-9808-45ec-87bb-b3e0c37740c6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0fae6e2-9808-45ec-87bb-b3e0c37740c6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0fae6e2-9808-45ec-87bb-b3e0c37740c6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0fae6e2-9808-45ec-87bb-b3e0c37740c6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0fae6e2-9808-45ec-87bb-b3e0c37740c6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62a00edf-309f-4819-8f24-c4b784958e2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46198","PortSpecifier":{"PortValue":46198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"62a00edf-309f-4819-8f24-c4b784958e2c","method":"GET","path":"/maas-api/v1/api-keys/3309f0e3-0e5c-40dd-a049-1f7cd117527e","host":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62a00edf-309f-4819-8f24-c4b784958e2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46198","PortSpecifier":{"PortValue":46198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448310,"nanos":665452191},"http":{"id":"62a00edf-309f-4819-8f24-c4b784958e2c","method":"GET","headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3309f0e3-0e5c-40dd-a049-1f7cd117527e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"62a00edf-309f-4819-8f24-c4b784958e2c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"62a00edf-309f-4819-8f24-c4b784958e2c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"]}} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"62a00edf-309f-4819-8f24-c4b784958e2c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3309f0e3-0e5c-40dd-a049-1f7cd117527e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62a00edf-309f-4819-8f24-c4b784958e2c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62a00edf-309f-4819-8f24-c4b784958e2c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62a00edf-309f-4819-8f24-c4b784958e2c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a68ed4/auth-test-model-a68ed4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"62a00edf-309f-4819-8f24-c4b784958e2c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62a00edf-309f-4819-8f24-c4b784958e2c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62a00edf-309f-4819-8f24-c4b784958e2c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62a00edf-309f-4819-8f24-c4b784958e2c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:18:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62a00edf-309f-4819-8f24-c4b784958e2c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:18:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d3aab6d-21a9-4932-af59-c7903c3df951","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57470","PortSpecifier":{"PortValue":57470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5d3aab6d-21a9-4932-af59-c7903c3df951","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:18:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d3aab6d-21a9-4932-af59-c7903c3df951","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57470","PortSpecifier":{"PortValue":57470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448327,"nanos":926834001},"http":{"id":"5d3aab6d-21a9-4932-af59-c7903c3df951","method":"POST","headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:18:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5d3aab6d-21a9-4932-af59-c7903c3df951","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T18:18:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5d3aab6d-21a9-4932-af59-c7903c3df951","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"]}} {"level":"debug","ts":"2026-07-07T18:18:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5d3aab6d-21a9-4932-af59-c7903c3df951","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:18:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d3aab6d-21a9-4932-af59-c7903c3df951","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:18:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d3aab6d-21a9-4932-af59-c7903c3df951","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:18:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d3aab6d-21a9-4932-af59-c7903c3df951","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a68ed4/auth-test-model-a68ed4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:18:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5d3aab6d-21a9-4932-af59-c7903c3df951","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T18:18:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d3aab6d-21a9-4932-af59-c7903c3df951","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T18:18:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d3aab6d-21a9-4932-af59-c7903c3df951","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T18:18:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d3aab6d-21a9-4932-af59-c7903c3df951","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:18:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d3aab6d-21a9-4932-af59-c7903c3df951","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:18:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0de1869e-5c94-4201-9a65-2fc00056a229","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56232","PortSpecifier":{"PortValue":56232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0de1869e-5c94-4201-9a65-2fc00056a229","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:18:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0de1869e-5c94-4201-9a65-2fc00056a229","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56232","PortSpecifier":{"PortValue":56232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448327,"nanos":964659130},"http":{"id":"0de1869e-5c94-4201-9a65-2fc00056a229","method":"POST","headers":{":authority":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:18:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0de1869e-5c94-4201-9a65-2fc00056a229","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T18:18:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0de1869e-5c94-4201-9a65-2fc00056a229","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"]}} {"level":"debug","ts":"2026-07-07T18:18:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0de1869e-5c94-4201-9a65-2fc00056a229","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:18:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0de1869e-5c94-4201-9a65-2fc00056a229","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:18:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0de1869e-5c94-4201-9a65-2fc00056a229","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:18:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0de1869e-5c94-4201-9a65-2fc00056a229","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bc5a1a/auth-test-model-bc5a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:18:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0de1869e-5c94-4201-9a65-2fc00056a229","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T18:18:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0de1869e-5c94-4201-9a65-2fc00056a229","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T18:18:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0de1869e-5c94-4201-9a65-2fc00056a229","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T18:18:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0de1869e-5c94-4201-9a65-2fc00056a229","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:18:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0de1869e-5c94-4201-9a65-2fc00056a229","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:18:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f1507ec-7bc9-46fd-a3a1-bc872cf82e5d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57486","PortSpecifier":{"PortValue":57486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4f1507ec-7bc9-46fd-a3a1-bc872cf82e5d","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:18:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f1507ec-7bc9-46fd-a3a1-bc872cf82e5d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57486","PortSpecifier":{"PortValue":57486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448328,"nanos":7103451},"http":{"id":"4f1507ec-7bc9-46fd-a3a1-bc872cf82e5d","method":"POST","headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:18:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4f1507ec-7bc9-46fd-a3a1-bc872cf82e5d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-AS1B4FRnniOpToHl_o17dops5iptW6yd0DwB2VwWYGvYUj3lX0v83DalI5m1"} {"level":"debug","ts":"2026-07-07T18:18:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4f1507ec-7bc9-46fd-a3a1-bc872cf82e5d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a68ed4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-AS1B4FRnniOpToHl_o17dops5iptW6yd0DwB2VwWYGvYUj3lX0v83DalI5m1\"}"} {"level":"debug","ts":"2026-07-07T18:18:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4f1507ec-7bc9-46fd-a3a1-bc872cf82e5d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a68ed4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9147f717-c016-4ec8-b300-44b7cb69ad51","keyName":"e2e-auth-iso-a-0a1687","subscription":"e2e-auth-iso-1708ac","tenant":"e2e-shared-a-a68ed4","userId":"9147f717-c016-4ec8-b300-44b7cb69ad51","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T18:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4f1507ec-7bc9-46fd-a3a1-bc872cf82e5d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f1507ec-7bc9-46fd-a3a1-bc872cf82e5d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f1507ec-7bc9-46fd-a3a1-bc872cf82e5d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f1507ec-7bc9-46fd-a3a1-bc872cf82e5d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a68ed4/auth-test-model-a68ed4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f1507ec-7bc9-46fd-a3a1-bc872cf82e5d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T18:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f1507ec-7bc9-46fd-a3a1-bc872cf82e5d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-1708ac"} {"level":"debug","ts":"2026-07-07T18:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f1507ec-7bc9-46fd-a3a1-bc872cf82e5d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T18:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4f1507ec-7bc9-46fd-a3a1-bc872cf82e5d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-07T18:18:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f1507ec-7bc9-46fd-a3a1-bc872cf82e5d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:18:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f1507ec-7bc9-46fd-a3a1-bc872cf82e5d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:18:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/011e8c0067916fc39c0e8a3d215ae854b7a8a04abffd7cdd3ca0f88f9c464d80"} {"level":"info","ts":"2026-07-07T18:18:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e16092c9e295b288e4edecbccd8be3273ee5a60b05c56fb8aa879bbb966014a"} {"level":"info","ts":"2026-07-07T18:18:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/323b7c87b1d7658e9943638f96f6c539b43703542138048adb73a6954df9f647"} {"level":"info","ts":"2026-07-07T18:18:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9c0fd9031a3f7cc203b79345fef9af53ae61ca534c391388e92500e82ed256d"} {"level":"info","ts":"2026-07-07T18:18:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e8202bbfcfb0fec62dbb5d0b3c128415446a5ed9f476fb0f0f93ceb305d1219"} {"level":"info","ts":"2026-07-07T18:18:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14e670f42ec80f62c0d934c4576716d98c1c8947dbef286afa0503a85b9d4d88"} {"level":"info","ts":"2026-07-07T18:18:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73aeff585982038c2245f38bded196f60d96ae6f16763d4d83fc1f8c7f58f40c"} {"level":"info","ts":"2026-07-07T18:18:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14cb9390b0cc79da66b64c73776a46872f13144f3d3a665c269b3c4cbfac002c"} {"level":"info","ts":"2026-07-07T18:18:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4341c6baa3d91a0858bc335b0f3ebc2f84cd2b237150a86aab6d62c8e779451f"} {"level":"info","ts":"2026-07-07T18:18:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5abe08a30447c9e3c02828c8a2b0d1733912d6ba5f3177520a8604438443516e"} {"level":"info","ts":"2026-07-07T18:18:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/edbdc54189993b91213663d8a8dab00acf56a6cb73258814b125f50aa1832f12"} {"level":"info","ts":"2026-07-07T18:18:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06a4b53a5d11fa8752042503b2609c68dc123b95b28838ce129fc28f0b417ca1"} {"level":"info","ts":"2026-07-07T18:18:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a03429df9bd2601858072fdb152bba490d8e81bdd889b10dedfd5803da1b5d0"} {"level":"info","ts":"2026-07-07T18:18:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/931f17250177d6c1378ddd430bbadfa912fd44afe3652887b8fa08a87d9b8993"} {"level":"info","ts":"2026-07-07T18:18:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57efed79663fa0dd26dfab1eb1f017a6cf3379141cd3107e0d9e2ace071d59f8"} {"level":"info","ts":"2026-07-07T18:18:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac1463bfe1f8a89b659b1d218830e3b881354c54af942990f412c1644abbb0c3"} {"level":"debug","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a65f4966b180b138c95f783c6e21af2f3276bdfde2b227034a3c9148cfd319a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a65f4966b180b138c95f783c6e21af2f3276bdfde2b227034a3c9148cfd319a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a65f4966b180b138c95f783c6e21af2f3276bdfde2b227034a3c9148cfd319a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a65f4966b180b138c95f783c6e21af2f3276bdfde2b227034a3c9148cfd319a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a65f4966b180b138c95f783c6e21af2f3276bdfde2b227034a3c9148cfd319a3"} {"level":"debug","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a65f4966b180b138c95f783c6e21af2f3276bdfde2b227034a3c9148cfd319a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a65f4966b180b138c95f783c6e21af2f3276bdfde2b227034a3c9148cfd319a3"} {"level":"debug","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a65f4966b180b138c95f783c6e21af2f3276bdfde2b227034a3c9148cfd319a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a65f4966b180b138c95f783c6e21af2f3276bdfde2b227034a3c9148cfd319a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a65f4966b180b138c95f783c6e21af2f3276bdfde2b227034a3c9148cfd319a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a65f4966b180b138c95f783c6e21af2f3276bdfde2b227034a3c9148cfd319a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a65f4966b180b138c95f783c6e21af2f3276bdfde2b227034a3c9148cfd319a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a65f4966b180b138c95f783c6e21af2f3276bdfde2b227034a3c9148cfd319a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a65f4966b180b138c95f783c6e21af2f3276bdfde2b227034a3c9148cfd319a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a65f4966b180b138c95f783c6e21af2f3276bdfde2b227034a3c9148cfd319a3"} {"level":"debug","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a65f4966b180b138c95f783c6e21af2f3276bdfde2b227034a3c9148cfd319a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a65f4966b180b138c95f783c6e21af2f3276bdfde2b227034a3c9148cfd319a3"} {"level":"debug","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a65f4966b180b138c95f783c6e21af2f3276bdfde2b227034a3c9148cfd319a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a65f4966b180b138c95f783c6e21af2f3276bdfde2b227034a3c9148cfd319a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a65f4966b180b138c95f783c6e21af2f3276bdfde2b227034a3c9148cfd319a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a65f4966b180b138c95f783c6e21af2f3276bdfde2b227034a3c9148cfd319a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a65f4966b180b138c95f783c6e21af2f3276bdfde2b227034a3c9148cfd319a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a65f4966b180b138c95f783c6e21af2f3276bdfde2b227034a3c9148cfd319a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a65f4966b180b138c95f783c6e21af2f3276bdfde2b227034a3c9148cfd319a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a65f4966b180b138c95f783c6e21af2f3276bdfde2b227034a3c9148cfd319a3"} {"level":"debug","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a65f4966b180b138c95f783c6e21af2f3276bdfde2b227034a3c9148cfd319a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a65f4966b180b138c95f783c6e21af2f3276bdfde2b227034a3c9148cfd319a3"} {"level":"debug","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a65f4966b180b138c95f783c6e21af2f3276bdfde2b227034a3c9148cfd319a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a65f4966b180b138c95f783c6e21af2f3276bdfde2b227034a3c9148cfd319a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a65f4966b180b138c95f783c6e21af2f3276bdfde2b227034a3c9148cfd319a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a65f4966b180b138c95f783c6e21af2f3276bdfde2b227034a3c9148cfd319a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74073fa0f01c957d58c9d6a60010a09e9b98db4b7f7831894943d9be5e6f35aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74073fa0f01c957d58c9d6a60010a09e9b98db4b7f7831894943d9be5e6f35aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74073fa0f01c957d58c9d6a60010a09e9b98db4b7f7831894943d9be5e6f35aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a65f4966b180b138c95f783c6e21af2f3276bdfde2b227034a3c9148cfd319a3"} {"level":"debug","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74073fa0f01c957d58c9d6a60010a09e9b98db4b7f7831894943d9be5e6f35aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74073fa0f01c957d58c9d6a60010a09e9b98db4b7f7831894943d9be5e6f35aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74073fa0f01c957d58c9d6a60010a09e9b98db4b7f7831894943d9be5e6f35aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74073fa0f01c957d58c9d6a60010a09e9b98db4b7f7831894943d9be5e6f35aa"} {"level":"debug","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74073fa0f01c957d58c9d6a60010a09e9b98db4b7f7831894943d9be5e6f35aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74073fa0f01c957d58c9d6a60010a09e9b98db4b7f7831894943d9be5e6f35aa"} {"level":"debug","ts":"2026-07-07T18:19:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74073fa0f01c957d58c9d6a60010a09e9b98db4b7f7831894943d9be5e6f35aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74073fa0f01c957d58c9d6a60010a09e9b98db4b7f7831894943d9be5e6f35aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74073fa0f01c957d58c9d6a60010a09e9b98db4b7f7831894943d9be5e6f35aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74073fa0f01c957d58c9d6a60010a09e9b98db4b7f7831894943d9be5e6f35aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74073fa0f01c957d58c9d6a60010a09e9b98db4b7f7831894943d9be5e6f35aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74073fa0f01c957d58c9d6a60010a09e9b98db4b7f7831894943d9be5e6f35aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74073fa0f01c957d58c9d6a60010a09e9b98db4b7f7831894943d9be5e6f35aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74073fa0f01c957d58c9d6a60010a09e9b98db4b7f7831894943d9be5e6f35aa"} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74073fa0f01c957d58c9d6a60010a09e9b98db4b7f7831894943d9be5e6f35aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74073fa0f01c957d58c9d6a60010a09e9b98db4b7f7831894943d9be5e6f35aa"} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88f488277f2857bb02890509f706e3dc0f7ed9417a28d01486b9e7773152911a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88f488277f2857bb02890509f706e3dc0f7ed9417a28d01486b9e7773152911a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88f488277f2857bb02890509f706e3dc0f7ed9417a28d01486b9e7773152911a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88f488277f2857bb02890509f706e3dc0f7ed9417a28d01486b9e7773152911a"} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88f488277f2857bb02890509f706e3dc0f7ed9417a28d01486b9e7773152911a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74073fa0f01c957d58c9d6a60010a09e9b98db4b7f7831894943d9be5e6f35aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74073fa0f01c957d58c9d6a60010a09e9b98db4b7f7831894943d9be5e6f35aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88f488277f2857bb02890509f706e3dc0f7ed9417a28d01486b9e7773152911a"} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74073fa0f01c957d58c9d6a60010a09e9b98db4b7f7831894943d9be5e6f35aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88f488277f2857bb02890509f706e3dc0f7ed9417a28d01486b9e7773152911a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74073fa0f01c957d58c9d6a60010a09e9b98db4b7f7831894943d9be5e6f35aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88f488277f2857bb02890509f706e3dc0f7ed9417a28d01486b9e7773152911a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88f488277f2857bb02890509f706e3dc0f7ed9417a28d01486b9e7773152911a"} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74073fa0f01c957d58c9d6a60010a09e9b98db4b7f7831894943d9be5e6f35aa"} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f99fb1d7afc9c2c78beb48deff0a5767591423fcbf45818ffb405724fff2d5b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f99fb1d7afc9c2c78beb48deff0a5767591423fcbf45818ffb405724fff2d5b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88f488277f2857bb02890509f706e3dc0f7ed9417a28d01486b9e7773152911a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88f488277f2857bb02890509f706e3dc0f7ed9417a28d01486b9e7773152911a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f99fb1d7afc9c2c78beb48deff0a5767591423fcbf45818ffb405724fff2d5b2"} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88f488277f2857bb02890509f706e3dc0f7ed9417a28d01486b9e7773152911a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f99fb1d7afc9c2c78beb48deff0a5767591423fcbf45818ffb405724fff2d5b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88f488277f2857bb02890509f706e3dc0f7ed9417a28d01486b9e7773152911a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f99fb1d7afc9c2c78beb48deff0a5767591423fcbf45818ffb405724fff2d5b2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f99fb1d7afc9c2c78beb48deff0a5767591423fcbf45818ffb405724fff2d5b2"} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f99fb1d7afc9c2c78beb48deff0a5767591423fcbf45818ffb405724fff2d5b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f99fb1d7afc9c2c78beb48deff0a5767591423fcbf45818ffb405724fff2d5b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88f488277f2857bb02890509f706e3dc0f7ed9417a28d01486b9e7773152911a"} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f99fb1d7afc9c2c78beb48deff0a5767591423fcbf45818ffb405724fff2d5b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f99fb1d7afc9c2c78beb48deff0a5767591423fcbf45818ffb405724fff2d5b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f99fb1d7afc9c2c78beb48deff0a5767591423fcbf45818ffb405724fff2d5b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f99fb1d7afc9c2c78beb48deff0a5767591423fcbf45818ffb405724fff2d5b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f99fb1d7afc9c2c78beb48deff0a5767591423fcbf45818ffb405724fff2d5b2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f99fb1d7afc9c2c78beb48deff0a5767591423fcbf45818ffb405724fff2d5b2"} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f99fb1d7afc9c2c78beb48deff0a5767591423fcbf45818ffb405724fff2d5b2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f99fb1d7afc9c2c78beb48deff0a5767591423fcbf45818ffb405724fff2d5b2"} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18"} {"level":"error","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f99fb1d7afc9c2c78beb48deff0a5767591423fcbf45818ffb405724fff2d5b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f99fb1d7afc9c2c78beb48deff0a5767591423fcbf45818ffb405724fff2d5b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18"} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f99fb1d7afc9c2c78beb48deff0a5767591423fcbf45818ffb405724fff2d5b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f99fb1d7afc9c2c78beb48deff0a5767591423fcbf45818ffb405724fff2d5b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f99fb1d7afc9c2c78beb48deff0a5767591423fcbf45818ffb405724fff2d5b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f99fb1d7afc9c2c78beb48deff0a5767591423fcbf45818ffb405724fff2d5b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f99fb1d7afc9c2c78beb48deff0a5767591423fcbf45818ffb405724fff2d5b2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f99fb1d7afc9c2c78beb48deff0a5767591423fcbf45818ffb405724fff2d5b2"} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70cf361591aa13dc73f1593e099648163cd3306df3d4c570ddbd9849f39dea7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70cf361591aa13dc73f1593e099648163cd3306df3d4c570ddbd9849f39dea7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93332d5b7d81e4e84cf9db355a3096432449b362e8d195262994ce40b786f721","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f99fb1d7afc9c2c78beb48deff0a5767591423fcbf45818ffb405724fff2d5b2"} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93332d5b7d81e4e84cf9db355a3096432449b362e8d195262994ce40b786f721","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f99fb1d7afc9c2c78beb48deff0a5767591423fcbf45818ffb405724fff2d5b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f99fb1d7afc9c2c78beb48deff0a5767591423fcbf45818ffb405724fff2d5b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70cf361591aa13dc73f1593e099648163cd3306df3d4c570ddbd9849f39dea7a"} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f99fb1d7afc9c2c78beb48deff0a5767591423fcbf45818ffb405724fff2d5b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93332d5b7d81e4e84cf9db355a3096432449b362e8d195262994ce40b786f721"} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70cf361591aa13dc73f1593e099648163cd3306df3d4c570ddbd9849f39dea7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70cf361591aa13dc73f1593e099648163cd3306df3d4c570ddbd9849f39dea7a"} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70cf361591aa13dc73f1593e099648163cd3306df3d4c570ddbd9849f39dea7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93332d5b7d81e4e84cf9db355a3096432449b362e8d195262994ce40b786f721","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93332d5b7d81e4e84cf9db355a3096432449b362e8d195262994ce40b786f721"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d03522534d6dad5b28028cab835951b2f70f674678ca4f91666803e7a612f998"} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93332d5b7d81e4e84cf9db355a3096432449b362e8d195262994ce40b786f721","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d03522534d6dad5b28028cab835951b2f70f674678ca4f91666803e7a612f998","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d03522534d6dad5b28028cab835951b2f70f674678ca4f91666803e7a612f998"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f99fb1d7afc9c2c78beb48deff0a5767591423fcbf45818ffb405724fff2d5b2"} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d03522534d6dad5b28028cab835951b2f70f674678ca4f91666803e7a612f998","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f99fb1d7afc9c2c78beb48deff0a5767591423fcbf45818ffb405724fff2d5b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70cf361591aa13dc73f1593e099648163cd3306df3d4c570ddbd9849f39dea7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70cf361591aa13dc73f1593e099648163cd3306df3d4c570ddbd9849f39dea7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93332d5b7d81e4e84cf9db355a3096432449b362e8d195262994ce40b786f721"} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70cf361591aa13dc73f1593e099648163cd3306df3d4c570ddbd9849f39dea7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93332d5b7d81e4e84cf9db355a3096432449b362e8d195262994ce40b786f721","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d03522534d6dad5b28028cab835951b2f70f674678ca4f91666803e7a612f998","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70cf361591aa13dc73f1593e099648163cd3306df3d4c570ddbd9849f39dea7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18"} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70cf361591aa13dc73f1593e099648163cd3306df3d4c570ddbd9849f39dea7a"} {"level":"info","ts":"2026-07-07T18:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d03522534d6dad5b28028cab835951b2f70f674678ca4f91666803e7a612f998"} {"level":"debug","ts":"2026-07-07T18:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"381141bac612a98f3856924576ec20d3fcd426fffc4c7903297839ebefe0da66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"381141bac612a98f3856924576ec20d3fcd426fffc4c7903297839ebefe0da66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381141bac612a98f3856924576ec20d3fcd426fffc4c7903297839ebefe0da66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381141bac612a98f3856924576ec20d3fcd426fffc4c7903297839ebefe0da66","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381141bac612a98f3856924576ec20d3fcd426fffc4c7903297839ebefe0da66"} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381141bac612a98f3856924576ec20d3fcd426fffc4c7903297839ebefe0da66","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381141bac612a98f3856924576ec20d3fcd426fffc4c7903297839ebefe0da66"} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"381141bac612a98f3856924576ec20d3fcd426fffc4c7903297839ebefe0da66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["381141bac612a98f3856924576ec20d3fcd426fffc4c7903297839ebefe0da66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"381141bac612a98f3856924576ec20d3fcd426fffc4c7903297839ebefe0da66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381141bac612a98f3856924576ec20d3fcd426fffc4c7903297839ebefe0da66","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381141bac612a98f3856924576ec20d3fcd426fffc4c7903297839ebefe0da66"} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5"} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5"} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5"} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5"} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5"} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5"} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5"} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5"} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e6a7750576160b571e99365be15ec819560d88cc2165afa9547e97973c95880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5"} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e6a7750576160b571e99365be15ec819560d88cc2165afa9547e97973c95880","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e6a7750576160b571e99365be15ec819560d88cc2165afa9547e97973c95880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e6a7750576160b571e99365be15ec819560d88cc2165afa9547e97973c95880"} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e6a7750576160b571e99365be15ec819560d88cc2165afa9547e97973c95880","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e6a7750576160b571e99365be15ec819560d88cc2165afa9547e97973c95880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e6a7750576160b571e99365be15ec819560d88cc2165afa9547e97973c95880"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6e6a7750576160b571e99365be15ec819560d88cc2165afa9547e97973c95880","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6e6a7750576160b571e99365be15ec819560d88cc2165afa9547e97973c95880\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e6a7750576160b571e99365be15ec819560d88cc2165afa9547e97973c95880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e6a7750576160b571e99365be15ec819560d88cc2165afa9547e97973c95880"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e6a7750576160b571e99365be15ec819560d88cc2165afa9547e97973c95880","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e6a7750576160b571e99365be15ec819560d88cc2165afa9547e97973c95880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e6a7750576160b571e99365be15ec819560d88cc2165afa9547e97973c95880"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5"} {"level":"error","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6e6a7750576160b571e99365be15ec819560d88cc2165afa9547e97973c95880","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6e6a7750576160b571e99365be15ec819560d88cc2165afa9547e97973c95880\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e6a7750576160b571e99365be15ec819560d88cc2165afa9547e97973c95880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e6a7750576160b571e99365be15ec819560d88cc2165afa9547e97973c95880","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e6a7750576160b571e99365be15ec819560d88cc2165afa9547e97973c95880"} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e6a7750576160b571e99365be15ec819560d88cc2165afa9547e97973c95880","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e6a7750576160b571e99365be15ec819560d88cc2165afa9547e97973c95880"} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e6a7750576160b571e99365be15ec819560d88cc2165afa9547e97973c95880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e6a7750576160b571e99365be15ec819560d88cc2165afa9547e97973c95880"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e6a7750576160b571e99365be15ec819560d88cc2165afa9547e97973c95880","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e6a7750576160b571e99365be15ec819560d88cc2165afa9547e97973c95880","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5"} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e6a7750576160b571e99365be15ec819560d88cc2165afa9547e97973c95880"} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d07537a7b4f8bb7de1f452ff2e69b8801c2e928503cd7e0b2db74b637e2ef678","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d07537a7b4f8bb7de1f452ff2e69b8801c2e928503cd7e0b2db74b637e2ef678","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d07537a7b4f8bb7de1f452ff2e69b8801c2e928503cd7e0b2db74b637e2ef678","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d07537a7b4f8bb7de1f452ff2e69b8801c2e928503cd7e0b2db74b637e2ef678","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d07537a7b4f8bb7de1f452ff2e69b8801c2e928503cd7e0b2db74b637e2ef678"} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d07537a7b4f8bb7de1f452ff2e69b8801c2e928503cd7e0b2db74b637e2ef678","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d07537a7b4f8bb7de1f452ff2e69b8801c2e928503cd7e0b2db74b637e2ef678"} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d07537a7b4f8bb7de1f452ff2e69b8801c2e928503cd7e0b2db74b637e2ef678","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d07537a7b4f8bb7de1f452ff2e69b8801c2e928503cd7e0b2db74b637e2ef678"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d07537a7b4f8bb7de1f452ff2e69b8801c2e928503cd7e0b2db74b637e2ef678","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d07537a7b4f8bb7de1f452ff2e69b8801c2e928503cd7e0b2db74b637e2ef678","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d07537a7b4f8bb7de1f452ff2e69b8801c2e928503cd7e0b2db74b637e2ef678","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0fef6d5d3c77efcb64b38ad9e0a907a1e2d2eae41939d206d435f2f50e360d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d07537a7b4f8bb7de1f452ff2e69b8801c2e928503cd7e0b2db74b637e2ef678"} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0fef6d5d3c77efcb64b38ad9e0a907a1e2d2eae41939d206d435f2f50e360d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d07537a7b4f8bb7de1f452ff2e69b8801c2e928503cd7e0b2db74b637e2ef678","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d07537a7b4f8bb7de1f452ff2e69b8801c2e928503cd7e0b2db74b637e2ef678"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d07537a7b4f8bb7de1f452ff2e69b8801c2e928503cd7e0b2db74b637e2ef678","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0fef6d5d3c77efcb64b38ad9e0a907a1e2d2eae41939d206d435f2f50e360d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0fef6d5d3c77efcb64b38ad9e0a907a1e2d2eae41939d206d435f2f50e360d3"} {"level":"info","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0fef6d5d3c77efcb64b38ad9e0a907a1e2d2eae41939d206d435f2f50e360d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d07537a7b4f8bb7de1f452ff2e69b8801c2e928503cd7e0b2db74b637e2ef678","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d07537a7b4f8bb7de1f452ff2e69b8801c2e928503cd7e0b2db74b637e2ef678","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0fef6d5d3c77efcb64b38ad9e0a907a1e2d2eae41939d206d435f2f50e360d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0fef6d5d3c77efcb64b38ad9e0a907a1e2d2eae41939d206d435f2f50e360d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d07537a7b4f8bb7de1f452ff2e69b8801c2e928503cd7e0b2db74b637e2ef678"} {"level":"info","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0fef6d5d3c77efcb64b38ad9e0a907a1e2d2eae41939d206d435f2f50e360d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d07537a7b4f8bb7de1f452ff2e69b8801c2e928503cd7e0b2db74b637e2ef678","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d07537a7b4f8bb7de1f452ff2e69b8801c2e928503cd7e0b2db74b637e2ef678"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0fef6d5d3c77efcb64b38ad9e0a907a1e2d2eae41939d206d435f2f50e360d3"} {"level":"info","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d07537a7b4f8bb7de1f452ff2e69b8801c2e928503cd7e0b2db74b637e2ef678","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0fef6d5d3c77efcb64b38ad9e0a907a1e2d2eae41939d206d435f2f50e360d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d07537a7b4f8bb7de1f452ff2e69b8801c2e928503cd7e0b2db74b637e2ef678","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d07537a7b4f8bb7de1f452ff2e69b8801c2e928503cd7e0b2db74b637e2ef678","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d07537a7b4f8bb7de1f452ff2e69b8801c2e928503cd7e0b2db74b637e2ef678","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d07537a7b4f8bb7de1f452ff2e69b8801c2e928503cd7e0b2db74b637e2ef678"} {"level":"debug","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d07537a7b4f8bb7de1f452ff2e69b8801c2e928503cd7e0b2db74b637e2ef678","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d07537a7b4f8bb7de1f452ff2e69b8801c2e928503cd7e0b2db74b637e2ef678"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d07537a7b4f8bb7de1f452ff2e69b8801c2e928503cd7e0b2db74b637e2ef678","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d07537a7b4f8bb7de1f452ff2e69b8801c2e928503cd7e0b2db74b637e2ef678","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0fef6d5d3c77efcb64b38ad9e0a907a1e2d2eae41939d206d435f2f50e360d3"} {"level":"info","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d07537a7b4f8bb7de1f452ff2e69b8801c2e928503cd7e0b2db74b637e2ef678"} {"level":"debug","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7edf39e3ee1864be4e1e14e5502e1d1e022482c3b17634c7bc5e298dd1e5cc39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7edf39e3ee1864be4e1e14e5502e1d1e022482c3b17634c7bc5e298dd1e5cc39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7edf39e3ee1864be4e1e14e5502e1d1e022482c3b17634c7bc5e298dd1e5cc39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7edf39e3ee1864be4e1e14e5502e1d1e022482c3b17634c7bc5e298dd1e5cc39"} {"level":"info","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7edf39e3ee1864be4e1e14e5502e1d1e022482c3b17634c7bc5e298dd1e5cc39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7edf39e3ee1864be4e1e14e5502e1d1e022482c3b17634c7bc5e298dd1e5cc39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7edf39e3ee1864be4e1e14e5502e1d1e022482c3b17634c7bc5e298dd1e5cc39","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7edf39e3ee1864be4e1e14e5502e1d1e022482c3b17634c7bc5e298dd1e5cc39\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7edf39e3ee1864be4e1e14e5502e1d1e022482c3b17634c7bc5e298dd1e5cc39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7edf39e3ee1864be4e1e14e5502e1d1e022482c3b17634c7bc5e298dd1e5cc39","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7edf39e3ee1864be4e1e14e5502e1d1e022482c3b17634c7bc5e298dd1e5cc39"} {"level":"info","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7edf39e3ee1864be4e1e14e5502e1d1e022482c3b17634c7bc5e298dd1e5cc39"} {"level":"debug","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84ed64b4071cd14f9f047795e9aabfd4775691b54fd51cc99406bf44dd17fe54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84ed64b4071cd14f9f047795e9aabfd4775691b54fd51cc99406bf44dd17fe54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84ed64b4071cd14f9f047795e9aabfd4775691b54fd51cc99406bf44dd17fe54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7edf39e3ee1864be4e1e14e5502e1d1e022482c3b17634c7bc5e298dd1e5cc39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7edf39e3ee1864be4e1e14e5502e1d1e022482c3b17634c7bc5e298dd1e5cc39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84ed64b4071cd14f9f047795e9aabfd4775691b54fd51cc99406bf44dd17fe54"} {"level":"info","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7edf39e3ee1864be4e1e14e5502e1d1e022482c3b17634c7bc5e298dd1e5cc39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84ed64b4071cd14f9f047795e9aabfd4775691b54fd51cc99406bf44dd17fe54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7edf39e3ee1864be4e1e14e5502e1d1e022482c3b17634c7bc5e298dd1e5cc39","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84ed64b4071cd14f9f047795e9aabfd4775691b54fd51cc99406bf44dd17fe54"} {"level":"debug","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84ed64b4071cd14f9f047795e9aabfd4775691b54fd51cc99406bf44dd17fe54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84ed64b4071cd14f9f047795e9aabfd4775691b54fd51cc99406bf44dd17fe54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84ed64b4071cd14f9f047795e9aabfd4775691b54fd51cc99406bf44dd17fe54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84ed64b4071cd14f9f047795e9aabfd4775691b54fd51cc99406bf44dd17fe54","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7edf39e3ee1864be4e1e14e5502e1d1e022482c3b17634c7bc5e298dd1e5cc39"} {"level":"info","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84ed64b4071cd14f9f047795e9aabfd4775691b54fd51cc99406bf44dd17fe54"} {"level":"debug","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f"} {"level":"debug","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f"} {"level":"debug","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f"} {"level":"debug","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f"} {"level":"debug","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:19:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f"} {"level":"debug","ts":"2026-07-07T18:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5"} {"level":"debug","ts":"2026-07-07T18:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5"} {"level":"debug","ts":"2026-07-07T18:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5"} {"level":"debug","ts":"2026-07-07T18:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d03522534d6dad5b28028cab835951b2f70f674678ca4f91666803e7a612f998","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d03522534d6dad5b28028cab835951b2f70f674678ca4f91666803e7a612f998"} {"level":"debug","ts":"2026-07-07T18:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93332d5b7d81e4e84cf9db355a3096432449b362e8d195262994ce40b786f721","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f"} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93332d5b7d81e4e84cf9db355a3096432449b362e8d195262994ce40b786f721"} {"level":"info","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f"} {"level":"info","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f"} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70cf361591aa13dc73f1593e099648163cd3306df3d4c570ddbd9849f39dea7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f"} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70cf361591aa13dc73f1593e099648163cd3306df3d4c570ddbd9849f39dea7a"} {"level":"info","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f"} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015"} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a65f4966b180b138c95f783c6e21af2f3276bdfde2b227034a3c9148cfd319a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a65f4966b180b138c95f783c6e21af2f3276bdfde2b227034a3c9148cfd319a3"} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe78ed315194f8e65805b8d98cca28474fbd6391e0c062d32ccd3f4b43f48d20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84ed64b4071cd14f9f047795e9aabfd4775691b54fd51cc99406bf44dd17fe54","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe78ed315194f8e65805b8d98cca28474fbd6391e0c062d32ccd3f4b43f48d20"} {"level":"info","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84ed64b4071cd14f9f047795e9aabfd4775691b54fd51cc99406bf44dd17fe54"} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18"} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18"} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18"} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18"} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74073fa0f01c957d58c9d6a60010a09e9b98db4b7f7831894943d9be5e6f35aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18"} {"level":"info","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74073fa0f01c957d58c9d6a60010a09e9b98db4b7f7831894943d9be5e6f35aa"} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0fef6d5d3c77efcb64b38ad9e0a907a1e2d2eae41939d206d435f2f50e360d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126"} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d07537a7b4f8bb7de1f452ff2e69b8801c2e928503cd7e0b2db74b637e2ef678","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0fef6d5d3c77efcb64b38ad9e0a907a1e2d2eae41939d206d435f2f50e360d3"} {"level":"info","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126"} {"level":"info","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d07537a7b4f8bb7de1f452ff2e69b8801c2e928503cd7e0b2db74b637e2ef678"} {"level":"error","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f99fb1d7afc9c2c78beb48deff0a5767591423fcbf45818ffb405724fff2d5b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126"} {"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381141bac612a98f3856924576ec20d3fcd426fffc4c7903297839ebefe0da66","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6"} {"level":"info","ts":"2026-07-07T18:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f99fb1d7afc9c2c78beb48deff0a5767591423fcbf45818ffb405724fff2d5b2"} {"level":"info","ts":"2026-07-07T18:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126"} {"level":"debug","ts":"2026-07-07T18:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3633783c2a10ac7fd33378e285dcc3cc7aeeae9f9efeef17b6a024241674f629","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88f488277f2857bb02890509f706e3dc0f7ed9417a28d01486b9e7773152911a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381141bac612a98f3856924576ec20d3fcd426fffc4c7903297839ebefe0da66"} {"level":"debug","ts":"2026-07-07T18:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d31d56eb1cbbfb9bc69f3e10ce3351f59b1c11ba52ca5c83f088fee4fe633ad6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3633783c2a10ac7fd33378e285dcc3cc7aeeae9f9efeef17b6a024241674f629"} {"level":"debug","ts":"2026-07-07T18:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52230aabaab09cfb7513ef55a7ad4959e24ef04a143562c9f66b569105a68c29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7edf39e3ee1864be4e1e14e5502e1d1e022482c3b17634c7bc5e298dd1e5cc39","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88f488277f2857bb02890509f706e3dc0f7ed9417a28d01486b9e7773152911a"} {"level":"info","ts":"2026-07-07T18:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126"} {"level":"debug","ts":"2026-07-07T18:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e6a7750576160b571e99365be15ec819560d88cc2165afa9547e97973c95880","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d31d56eb1cbbfb9bc69f3e10ce3351f59b1c11ba52ca5c83f088fee4fe633ad6"} {"level":"debug","ts":"2026-07-07T18:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52230aabaab09cfb7513ef55a7ad4959e24ef04a143562c9f66b569105a68c29"} {"level":"info","ts":"2026-07-07T18:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7edf39e3ee1864be4e1e14e5502e1d1e022482c3b17634c7bc5e298dd1e5cc39"} {"level":"info","ts":"2026-07-07T18:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e6a7750576160b571e99365be15ec819560d88cc2165afa9547e97973c95880"} {"level":"info","ts":"2026-07-07T18:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856"} {"level":"info","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d13e11f6-0893-478b-9ee1-7f5d846fd30f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48956","PortSpecifier":{"PortValue":48956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d13e11f6-0893-478b-9ee1-7f5d846fd30f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d13e11f6-0893-478b-9ee1-7f5d846fd30f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48956","PortSpecifier":{"PortValue":48956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448411,"nanos":524211097},"http":{"id":"d13e11f6-0893-478b-9ee1-7f5d846fd30f","method":"POST","headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d13e11f6-0893-478b-9ee1-7f5d846fd30f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d13e11f6-0893-478b-9ee1-7f5d846fd30f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"]}} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d13e11f6-0893-478b-9ee1-7f5d846fd30f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d13e11f6-0893-478b-9ee1-7f5d846fd30f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d13e11f6-0893-478b-9ee1-7f5d846fd30f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d13e11f6-0893-478b-9ee1-7f5d846fd30f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a68ed4/sub-test-model-a68ed4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d13e11f6-0893-478b-9ee1-7f5d846fd30f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d13e11f6-0893-478b-9ee1-7f5d846fd30f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d13e11f6-0893-478b-9ee1-7f5d846fd30f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d13e11f6-0893-478b-9ee1-7f5d846fd30f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d13e11f6-0893-478b-9ee1-7f5d846fd30f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3366093a-6ab9-458c-8d1c-cf481315175c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51590","PortSpecifier":{"PortValue":51590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3366093a-6ab9-458c-8d1c-cf481315175c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3366093a-6ab9-458c-8d1c-cf481315175c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51590","PortSpecifier":{"PortValue":51590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448411,"nanos":572299456},"http":{"id":"3366093a-6ab9-458c-8d1c-cf481315175c","method":"POST","headers":{":authority":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3366093a-6ab9-458c-8d1c-cf481315175c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3366093a-6ab9-458c-8d1c-cf481315175c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"]}} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3366093a-6ab9-458c-8d1c-cf481315175c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3366093a-6ab9-458c-8d1c-cf481315175c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3366093a-6ab9-458c-8d1c-cf481315175c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3366093a-6ab9-458c-8d1c-cf481315175c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bc5a1a/sub-test-model-bc5a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3366093a-6ab9-458c-8d1c-cf481315175c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3366093a-6ab9-458c-8d1c-cf481315175c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3366093a-6ab9-458c-8d1c-cf481315175c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3366093a-6ab9-458c-8d1c-cf481315175c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3366093a-6ab9-458c-8d1c-cf481315175c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59413982-dc7c-4b71-8541-cafd554aa4cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48970","PortSpecifier":{"PortValue":48970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"59413982-dc7c-4b71-8541-cafd554aa4cf","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59413982-dc7c-4b71-8541-cafd554aa4cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48970","PortSpecifier":{"PortValue":48970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448411,"nanos":617409902},"http":{"id":"59413982-dc7c-4b71-8541-cafd554aa4cf","method":"GET","headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"59413982-dc7c-4b71-8541-cafd554aa4cf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-VofKpQhPp4tpiTVM_6IlJ3dEQIL6qiaFtFF4vZLwD2Ayeca2rZYAMcDJE0JE"} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"59413982-dc7c-4b71-8541-cafd554aa4cf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a68ed4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-VofKpQhPp4tpiTVM_6IlJ3dEQIL6qiaFtFF4vZLwD2Ayeca2rZYAMcDJE0JE\"}"} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"59413982-dc7c-4b71-8541-cafd554aa4cf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a68ed4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a50ece39-31b1-489a-b48e-47746d7151a1","keyName":"e2e-sub-iso-682dc3","subscription":"e2e-a-only-768524","tenant":"e2e-shared-a-a68ed4","userId":"a50ece39-31b1-489a-b48e-47746d7151a1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"59413982-dc7c-4b71-8541-cafd554aa4cf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59413982-dc7c-4b71-8541-cafd554aa4cf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59413982-dc7c-4b71-8541-cafd554aa4cf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59413982-dc7c-4b71-8541-cafd554aa4cf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a68ed4/sub-test-model-a68ed4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"59413982-dc7c-4b71-8541-cafd554aa4cf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59413982-dc7c-4b71-8541-cafd554aa4cf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59413982-dc7c-4b71-8541-cafd554aa4cf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-768524"} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59413982-dc7c-4b71-8541-cafd554aa4cf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59413982-dc7c-4b71-8541-cafd554aa4cf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59413982-dc7c-4b71-8541-cafd554aa4cf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c37e022-344e-4a75-b115-ddd2bff05500","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51604","PortSpecifier":{"PortValue":51604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c37e022-344e-4a75-b115-ddd2bff05500","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c37e022-344e-4a75-b115-ddd2bff05500","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51604","PortSpecifier":{"PortValue":51604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448411,"nanos":662353048},"http":{"id":"0c37e022-344e-4a75-b115-ddd2bff05500","method":"GET","headers":{":authority":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c37e022-344e-4a75-b115-ddd2bff05500","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-joDWzDmciigY0ems_FgRkiayKJfPMUuc62ZOrFsYkS6c2VA8FTk0OLpBBBHM"} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0c37e022-344e-4a75-b115-ddd2bff05500","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-bc5a1a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-joDWzDmciigY0ems_FgRkiayKJfPMUuc62ZOrFsYkS6c2VA8FTk0OLpBBBHM\"}"} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0c37e022-344e-4a75-b115-ddd2bff05500","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-bc5a1a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8ac1238a-88de-4555-a0e6-fa7251c9fe5f","keyName":"e2e-sub-iso-43577a","subscription":"e2e-b-only-768524","tenant":"e2e-shared-b-bc5a1a","userId":"8ac1238a-88de-4555-a0e6-fa7251c9fe5f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c37e022-344e-4a75-b115-ddd2bff05500","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c37e022-344e-4a75-b115-ddd2bff05500","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c37e022-344e-4a75-b115-ddd2bff05500","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c37e022-344e-4a75-b115-ddd2bff05500","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bc5a1a/sub-test-model-bc5a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0c37e022-344e-4a75-b115-ddd2bff05500","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c37e022-344e-4a75-b115-ddd2bff05500","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c37e022-344e-4a75-b115-ddd2bff05500","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c37e022-344e-4a75-b115-ddd2bff05500","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-768524"} {"level":"info","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c37e022-344e-4a75-b115-ddd2bff05500","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:20:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c37e022-344e-4a75-b115-ddd2bff05500","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e069122-43dd-46b7-baf1-19885d7ca471","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48132","PortSpecifier":{"PortValue":48132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8e069122-43dd-46b7-baf1-19885d7ca471","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e069122-43dd-46b7-baf1-19885d7ca471","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48132","PortSpecifier":{"PortValue":48132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448430,"nanos":350325005},"http":{"id":"8e069122-43dd-46b7-baf1-19885d7ca471","method":"POST","headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8e069122-43dd-46b7-baf1-19885d7ca471","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8e069122-43dd-46b7-baf1-19885d7ca471","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"]}} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8e069122-43dd-46b7-baf1-19885d7ca471","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e069122-43dd-46b7-baf1-19885d7ca471","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e069122-43dd-46b7-baf1-19885d7ca471","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e069122-43dd-46b7-baf1-19885d7ca471","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a68ed4/sub-test-model-a68ed4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8e069122-43dd-46b7-baf1-19885d7ca471","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e069122-43dd-46b7-baf1-19885d7ca471","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e069122-43dd-46b7-baf1-19885d7ca471","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e069122-43dd-46b7-baf1-19885d7ca471","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e069122-43dd-46b7-baf1-19885d7ca471","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c314e71a-c614-465b-80bd-b07e587a8e96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46586","PortSpecifier":{"PortValue":46586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c314e71a-c614-465b-80bd-b07e587a8e96","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c314e71a-c614-465b-80bd-b07e587a8e96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46586","PortSpecifier":{"PortValue":46586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448430,"nanos":388435521},"http":{"id":"c314e71a-c614-465b-80bd-b07e587a8e96","method":"POST","headers":{":authority":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c314e71a-c614-465b-80bd-b07e587a8e96","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c314e71a-c614-465b-80bd-b07e587a8e96","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"]}} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c314e71a-c614-465b-80bd-b07e587a8e96","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c314e71a-c614-465b-80bd-b07e587a8e96","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c314e71a-c614-465b-80bd-b07e587a8e96","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c314e71a-c614-465b-80bd-b07e587a8e96","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bc5a1a/sub-test-model-bc5a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c314e71a-c614-465b-80bd-b07e587a8e96","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c314e71a-c614-465b-80bd-b07e587a8e96","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c314e71a-c614-465b-80bd-b07e587a8e96","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c314e71a-c614-465b-80bd-b07e587a8e96","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c314e71a-c614-465b-80bd-b07e587a8e96","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"abd34483-d81c-448d-b671-2996084655a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48148","PortSpecifier":{"PortValue":48148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"abd34483-d81c-448d-b671-2996084655a8","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"abd34483-d81c-448d-b671-2996084655a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48148","PortSpecifier":{"PortValue":48148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448430,"nanos":432166742},"http":{"id":"abd34483-d81c-448d-b671-2996084655a8","method":"POST","headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"abd34483-d81c-448d-b671-2996084655a8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YtWXiPc9ssgXZje3_VdnL9VkMNJwMRRjQ6XiSuIxAzFNnDiz5bHyLcVOm7pt"} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"abd34483-d81c-448d-b671-2996084655a8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a68ed4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YtWXiPc9ssgXZje3_VdnL9VkMNJwMRRjQ6XiSuIxAzFNnDiz5bHyLcVOm7pt\"}"} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"abd34483-d81c-448d-b671-2996084655a8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a68ed4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ff3c56e0-418f-4bc8-b05b-823b0f71bca0","keyName":"e2e-sub-iso-0e3bba","subscription":"e2e-shared-sub-328537","tenant":"e2e-shared-a-a68ed4","userId":"ff3c56e0-418f-4bc8-b05b-823b0f71bca0","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"abd34483-d81c-448d-b671-2996084655a8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abd34483-d81c-448d-b671-2996084655a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abd34483-d81c-448d-b671-2996084655a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abd34483-d81c-448d-b671-2996084655a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a68ed4/sub-test-model-a68ed4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"abd34483-d81c-448d-b671-2996084655a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abd34483-d81c-448d-b671-2996084655a8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abd34483-d81c-448d-b671-2996084655a8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abd34483-d81c-448d-b671-2996084655a8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-328537"} {"level":"info","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"abd34483-d81c-448d-b671-2996084655a8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"abd34483-d81c-448d-b671-2996084655a8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e207ce02-c157-400a-a83b-495ec7cb94e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46594","PortSpecifier":{"PortValue":46594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e207ce02-c157-400a-a83b-495ec7cb94e1","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e207ce02-c157-400a-a83b-495ec7cb94e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46594","PortSpecifier":{"PortValue":46594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448430,"nanos":463445660},"http":{"id":"e207ce02-c157-400a-a83b-495ec7cb94e1","method":"POST","headers":{":authority":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e207ce02-c157-400a-a83b-495ec7cb94e1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15bCs0XY2HHztltX1_niLYvjpCcaZKIGTXm5NAoYLhwiup5Hw4GCId6RLgA7T"} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e207ce02-c157-400a-a83b-495ec7cb94e1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-bc5a1a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15bCs0XY2HHztltX1_niLYvjpCcaZKIGTXm5NAoYLhwiup5Hw4GCId6RLgA7T\"}"} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e207ce02-c157-400a-a83b-495ec7cb94e1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-bc5a1a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8f3e5f2a-f5fc-40e2-b5f7-98cc7832c339","keyName":"e2e-sub-iso-12e6ea","subscription":"e2e-shared-sub-328537","tenant":"e2e-shared-b-bc5a1a","userId":"8f3e5f2a-f5fc-40e2-b5f7-98cc7832c339","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e207ce02-c157-400a-a83b-495ec7cb94e1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e207ce02-c157-400a-a83b-495ec7cb94e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e207ce02-c157-400a-a83b-495ec7cb94e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e207ce02-c157-400a-a83b-495ec7cb94e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bc5a1a/sub-test-model-bc5a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e207ce02-c157-400a-a83b-495ec7cb94e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e207ce02-c157-400a-a83b-495ec7cb94e1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e207ce02-c157-400a-a83b-495ec7cb94e1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-328537"} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e207ce02-c157-400a-a83b-495ec7cb94e1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e207ce02-c157-400a-a83b-495ec7cb94e1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:20:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e207ce02-c157-400a-a83b-495ec7cb94e1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dfdf79e349791203f34c8b2ac2ec1c58742cfb20c7e99da6ad9eccecbd5e0cf5"} {"level":"info","ts":"2026-07-07T18:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4aebfe15e18bf8451a34eea7fdbda90cd2b7ace46fa68634f25b8237c5aa8c8f"} {"level":"info","ts":"2026-07-07T18:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74073fa0f01c957d58c9d6a60010a09e9b98db4b7f7831894943d9be5e6f35aa"} {"level":"info","ts":"2026-07-07T18:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a65f4966b180b138c95f783c6e21af2f3276bdfde2b227034a3c9148cfd319a3"} {"level":"info","ts":"2026-07-07T18:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93332d5b7d81e4e84cf9db355a3096432449b362e8d195262994ce40b786f721"} {"level":"info","ts":"2026-07-07T18:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88f488277f2857bb02890509f706e3dc0f7ed9417a28d01486b9e7773152911a"} {"level":"info","ts":"2026-07-07T18:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0fef6d5d3c77efcb64b38ad9e0a907a1e2d2eae41939d206d435f2f50e360d3"} {"level":"info","ts":"2026-07-07T18:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e6a7750576160b571e99365be15ec819560d88cc2165afa9547e97973c95880"} {"level":"info","ts":"2026-07-07T18:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f99fb1d7afc9c2c78beb48deff0a5767591423fcbf45818ffb405724fff2d5b2"} {"level":"info","ts":"2026-07-07T18:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d03522534d6dad5b28028cab835951b2f70f674678ca4f91666803e7a612f998"} {"level":"info","ts":"2026-07-07T18:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7edf39e3ee1864be4e1e14e5502e1d1e022482c3b17634c7bc5e298dd1e5cc39"} {"level":"info","ts":"2026-07-07T18:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84ed64b4071cd14f9f047795e9aabfd4775691b54fd51cc99406bf44dd17fe54"} {"level":"info","ts":"2026-07-07T18:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/381141bac612a98f3856924576ec20d3fcd426fffc4c7903297839ebefe0da66"} {"level":"info","ts":"2026-07-07T18:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03f1fc612fd922561b6e23fe07c5ad72e482e5bfae01a5eb516333ad7c81aa18"} {"level":"info","ts":"2026-07-07T18:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70cf361591aa13dc73f1593e099648163cd3306df3d4c570ddbd9849f39dea7a"} {"level":"info","ts":"2026-07-07T18:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d07537a7b4f8bb7de1f452ff2e69b8801c2e928503cd7e0b2db74b637e2ef678"} {"level":"debug","ts":"2026-07-07T18:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"488357b7ed8b7be5a0787c53a1669a6d8e668006a700c56616f8173bdeeb6a4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"488357b7ed8b7be5a0787c53a1669a6d8e668006a700c56616f8173bdeeb6a4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"488357b7ed8b7be5a0787c53a1669a6d8e668006a700c56616f8173bdeeb6a4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"488357b7ed8b7be5a0787c53a1669a6d8e668006a700c56616f8173bdeeb6a4f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/488357b7ed8b7be5a0787c53a1669a6d8e668006a700c56616f8173bdeeb6a4f"} {"level":"debug","ts":"2026-07-07T18:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"488357b7ed8b7be5a0787c53a1669a6d8e668006a700c56616f8173bdeeb6a4f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/488357b7ed8b7be5a0787c53a1669a6d8e668006a700c56616f8173bdeeb6a4f"} {"level":"debug","ts":"2026-07-07T18:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"488357b7ed8b7be5a0787c53a1669a6d8e668006a700c56616f8173bdeeb6a4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["488357b7ed8b7be5a0787c53a1669a6d8e668006a700c56616f8173bdeeb6a4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"488357b7ed8b7be5a0787c53a1669a6d8e668006a700c56616f8173bdeeb6a4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"488357b7ed8b7be5a0787c53a1669a6d8e668006a700c56616f8173bdeeb6a4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"488357b7ed8b7be5a0787c53a1669a6d8e668006a700c56616f8173bdeeb6a4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"488357b7ed8b7be5a0787c53a1669a6d8e668006a700c56616f8173bdeeb6a4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"488357b7ed8b7be5a0787c53a1669a6d8e668006a700c56616f8173bdeeb6a4f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/488357b7ed8b7be5a0787c53a1669a6d8e668006a700c56616f8173bdeeb6a4f"} {"level":"debug","ts":"2026-07-07T18:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"488357b7ed8b7be5a0787c53a1669a6d8e668006a700c56616f8173bdeeb6a4f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/488357b7ed8b7be5a0787c53a1669a6d8e668006a700c56616f8173bdeeb6a4f"} {"level":"debug","ts":"2026-07-07T18:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"488357b7ed8b7be5a0787c53a1669a6d8e668006a700c56616f8173bdeeb6a4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["488357b7ed8b7be5a0787c53a1669a6d8e668006a700c56616f8173bdeeb6a4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"488357b7ed8b7be5a0787c53a1669a6d8e668006a700c56616f8173bdeeb6a4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"488357b7ed8b7be5a0787c53a1669a6d8e668006a700c56616f8173bdeeb6a4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"488357b7ed8b7be5a0787c53a1669a6d8e668006a700c56616f8173bdeeb6a4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"488357b7ed8b7be5a0787c53a1669a6d8e668006a700c56616f8173bdeeb6a4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"488357b7ed8b7be5a0787c53a1669a6d8e668006a700c56616f8173bdeeb6a4f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/488357b7ed8b7be5a0787c53a1669a6d8e668006a700c56616f8173bdeeb6a4f"} {"level":"debug","ts":"2026-07-07T18:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"488357b7ed8b7be5a0787c53a1669a6d8e668006a700c56616f8173bdeeb6a4f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/488357b7ed8b7be5a0787c53a1669a6d8e668006a700c56616f8173bdeeb6a4f"} {"level":"debug","ts":"2026-07-07T18:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"488357b7ed8b7be5a0787c53a1669a6d8e668006a700c56616f8173bdeeb6a4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["488357b7ed8b7be5a0787c53a1669a6d8e668006a700c56616f8173bdeeb6a4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"488357b7ed8b7be5a0787c53a1669a6d8e668006a700c56616f8173bdeeb6a4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eedda13767381738c8aafe12a39f83324c399d2297e3e92d01310dcb21de776e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eedda13767381738c8aafe12a39f83324c399d2297e3e92d01310dcb21de776e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"488357b7ed8b7be5a0787c53a1669a6d8e668006a700c56616f8173bdeeb6a4f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eedda13767381738c8aafe12a39f83324c399d2297e3e92d01310dcb21de776e"} {"level":"debug","ts":"2026-07-07T18:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eedda13767381738c8aafe12a39f83324c399d2297e3e92d01310dcb21de776e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eedda13767381738c8aafe12a39f83324c399d2297e3e92d01310dcb21de776e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eedda13767381738c8aafe12a39f83324c399d2297e3e92d01310dcb21de776e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eedda13767381738c8aafe12a39f83324c399d2297e3e92d01310dcb21de776e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eedda13767381738c8aafe12a39f83324c399d2297e3e92d01310dcb21de776e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eedda13767381738c8aafe12a39f83324c399d2297e3e92d01310dcb21de776e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eedda13767381738c8aafe12a39f83324c399d2297e3e92d01310dcb21de776e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eedda13767381738c8aafe12a39f83324c399d2297e3e92d01310dcb21de776e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/488357b7ed8b7be5a0787c53a1669a6d8e668006a700c56616f8173bdeeb6a4f"} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eedda13767381738c8aafe12a39f83324c399d2297e3e92d01310dcb21de776e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eedda13767381738c8aafe12a39f83324c399d2297e3e92d01310dcb21de776e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eedda13767381738c8aafe12a39f83324c399d2297e3e92d01310dcb21de776e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eedda13767381738c8aafe12a39f83324c399d2297e3e92d01310dcb21de776e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eedda13767381738c8aafe12a39f83324c399d2297e3e92d01310dcb21de776e"} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eedda13767381738c8aafe12a39f83324c399d2297e3e92d01310dcb21de776e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eedda13767381738c8aafe12a39f83324c399d2297e3e92d01310dcb21de776e"} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11617ed4413d20f6eeff70e8e4f9b734fd0a358f4afa4d31ab78e75d15d9fc16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11617ed4413d20f6eeff70e8e4f9b734fd0a358f4afa4d31ab78e75d15d9fc16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11617ed4413d20f6eeff70e8e4f9b734fd0a358f4afa4d31ab78e75d15d9fc16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11617ed4413d20f6eeff70e8e4f9b734fd0a358f4afa4d31ab78e75d15d9fc16","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11617ed4413d20f6eeff70e8e4f9b734fd0a358f4afa4d31ab78e75d15d9fc16"} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eedda13767381738c8aafe12a39f83324c399d2297e3e92d01310dcb21de776e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eedda13767381738c8aafe12a39f83324c399d2297e3e92d01310dcb21de776e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eedda13767381738c8aafe12a39f83324c399d2297e3e92d01310dcb21de776e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11617ed4413d20f6eeff70e8e4f9b734fd0a358f4afa4d31ab78e75d15d9fc16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eedda13767381738c8aafe12a39f83324c399d2297e3e92d01310dcb21de776e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11617ed4413d20f6eeff70e8e4f9b734fd0a358f4afa4d31ab78e75d15d9fc16"} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eedda13767381738c8aafe12a39f83324c399d2297e3e92d01310dcb21de776e"} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11617ed4413d20f6eeff70e8e4f9b734fd0a358f4afa4d31ab78e75d15d9fc16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11617ed4413d20f6eeff70e8e4f9b734fd0a358f4afa4d31ab78e75d15d9fc16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11617ed4413d20f6eeff70e8e4f9b734fd0a358f4afa4d31ab78e75d15d9fc16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad598cb5e40d0568c0bf112e9fdd894f400169ae3e38eff81f7def0b89da1c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad598cb5e40d0568c0bf112e9fdd894f400169ae3e38eff81f7def0b89da1c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11617ed4413d20f6eeff70e8e4f9b734fd0a358f4afa4d31ab78e75d15d9fc16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad598cb5e40d0568c0bf112e9fdd894f400169ae3e38eff81f7def0b89da1c9e"} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad598cb5e40d0568c0bf112e9fdd894f400169ae3e38eff81f7def0b89da1c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad598cb5e40d0568c0bf112e9fdd894f400169ae3e38eff81f7def0b89da1c9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad598cb5e40d0568c0bf112e9fdd894f400169ae3e38eff81f7def0b89da1c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11617ed4413d20f6eeff70e8e4f9b734fd0a358f4afa4d31ab78e75d15d9fc16"} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad598cb5e40d0568c0bf112e9fdd894f400169ae3e38eff81f7def0b89da1c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596"} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad598cb5e40d0568c0bf112e9fdd894f400169ae3e38eff81f7def0b89da1c9e"} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e1bff518894cdb9f64ececaa9c7fc3821af15eb4cf6f50ddff69a1884410666","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596"} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e1bff518894cdb9f64ececaa9c7fc3821af15eb4cf6f50ddff69a1884410666","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e1bff518894cdb9f64ececaa9c7fc3821af15eb4cf6f50ddff69a1884410666","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e1bff518894cdb9f64ececaa9c7fc3821af15eb4cf6f50ddff69a1884410666"} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e1bff518894cdb9f64ececaa9c7fc3821af15eb4cf6f50ddff69a1884410666","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e1bff518894cdb9f64ececaa9c7fc3821af15eb4cf6f50ddff69a1884410666","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e1bff518894cdb9f64ececaa9c7fc3821af15eb4cf6f50ddff69a1884410666"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596"} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e1bff518894cdb9f64ececaa9c7fc3821af15eb4cf6f50ddff69a1884410666","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e1bff518894cdb9f64ececaa9c7fc3821af15eb4cf6f50ddff69a1884410666"} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e1bff518894cdb9f64ececaa9c7fc3821af15eb4cf6f50ddff69a1884410666","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596"} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e1bff518894cdb9f64ececaa9c7fc3821af15eb4cf6f50ddff69a1884410666"} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596"} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596"} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4a9ba0b640a078a52676f32281a4d5ff5072e0db865656325c53f5b51df9bfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596"} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4a9ba0b640a078a52676f32281a4d5ff5072e0db865656325c53f5b51df9bfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4a9ba0b640a078a52676f32281a4d5ff5072e0db865656325c53f5b51df9bfa"} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4a9ba0b640a078a52676f32281a4d5ff5072e0db865656325c53f5b51df9bfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4a9ba0b640a078a52676f32281a4d5ff5072e0db865656325c53f5b51df9bfa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4a9ba0b640a078a52676f32281a4d5ff5072e0db865656325c53f5b51df9bfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604"} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4a9ba0b640a078a52676f32281a4d5ff5072e0db865656325c53f5b51df9bfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4a9ba0b640a078a52676f32281a4d5ff5072e0db865656325c53f5b51df9bfa"} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4a9ba0b640a078a52676f32281a4d5ff5072e0db865656325c53f5b51df9bfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4a9ba0b640a078a52676f32281a4d5ff5072e0db865656325c53f5b51df9bfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4a9ba0b640a078a52676f32281a4d5ff5072e0db865656325c53f5b51df9bfa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604"} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4a9ba0b640a078a52676f32281a4d5ff5072e0db865656325c53f5b51df9bfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596"} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4a9ba0b640a078a52676f32281a4d5ff5072e0db865656325c53f5b51df9bfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4a9ba0b640a078a52676f32281a4d5ff5072e0db865656325c53f5b51df9bfa"} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4a9ba0b640a078a52676f32281a4d5ff5072e0db865656325c53f5b51df9bfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4a9ba0b640a078a52676f32281a4d5ff5072e0db865656325c53f5b51df9bfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4a9ba0b640a078a52676f32281a4d5ff5072e0db865656325c53f5b51df9bfa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604"} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4a9ba0b640a078a52676f32281a4d5ff5072e0db865656325c53f5b51df9bfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4a9ba0b640a078a52676f32281a4d5ff5072e0db865656325c53f5b51df9bfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4a9ba0b640a078a52676f32281a4d5ff5072e0db865656325c53f5b51df9bfa"} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4a9ba0b640a078a52676f32281a4d5ff5072e0db865656325c53f5b51df9bfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4a9ba0b640a078a52676f32281a4d5ff5072e0db865656325c53f5b51df9bfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4a9ba0b640a078a52676f32281a4d5ff5072e0db865656325c53f5b51df9bfa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604"} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4a9ba0b640a078a52676f32281a4d5ff5072e0db865656325c53f5b51df9bfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4a9ba0b640a078a52676f32281a4d5ff5072e0db865656325c53f5b51df9bfa"} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4a9ba0b640a078a52676f32281a4d5ff5072e0db865656325c53f5b51df9bfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604"} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4a9ba0b640a078a52676f32281a4d5ff5072e0db865656325c53f5b51df9bfa"} {"level":"info","ts":"2026-07-07T18:20:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604"} {"level":"debug","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6871b188ab4b680247e7836072184592d4666d5309e8d236b510ad1cd0d80a3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6871b188ab4b680247e7836072184592d4666d5309e8d236b510ad1cd0d80a3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6871b188ab4b680247e7836072184592d4666d5309e8d236b510ad1cd0d80a3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6871b188ab4b680247e7836072184592d4666d5309e8d236b510ad1cd0d80a3d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6871b188ab4b680247e7836072184592d4666d5309e8d236b510ad1cd0d80a3d"} {"level":"debug","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6871b188ab4b680247e7836072184592d4666d5309e8d236b510ad1cd0d80a3d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6871b188ab4b680247e7836072184592d4666d5309e8d236b510ad1cd0d80a3d"} {"level":"debug","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6871b188ab4b680247e7836072184592d4666d5309e8d236b510ad1cd0d80a3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6871b188ab4b680247e7836072184592d4666d5309e8d236b510ad1cd0d80a3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6871b188ab4b680247e7836072184592d4666d5309e8d236b510ad1cd0d80a3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6871b188ab4b680247e7836072184592d4666d5309e8d236b510ad1cd0d80a3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6871b188ab4b680247e7836072184592d4666d5309e8d236b510ad1cd0d80a3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6871b188ab4b680247e7836072184592d4666d5309e8d236b510ad1cd0d80a3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6871b188ab4b680247e7836072184592d4666d5309e8d236b510ad1cd0d80a3d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6871b188ab4b680247e7836072184592d4666d5309e8d236b510ad1cd0d80a3d"} {"level":"debug","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6871b188ab4b680247e7836072184592d4666d5309e8d236b510ad1cd0d80a3d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6871b188ab4b680247e7836072184592d4666d5309e8d236b510ad1cd0d80a3d"} {"level":"debug","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6871b188ab4b680247e7836072184592d4666d5309e8d236b510ad1cd0d80a3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6871b188ab4b680247e7836072184592d4666d5309e8d236b510ad1cd0d80a3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6871b188ab4b680247e7836072184592d4666d5309e8d236b510ad1cd0d80a3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6871b188ab4b680247e7836072184592d4666d5309e8d236b510ad1cd0d80a3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6871b188ab4b680247e7836072184592d4666d5309e8d236b510ad1cd0d80a3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6871b188ab4b680247e7836072184592d4666d5309e8d236b510ad1cd0d80a3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6871b188ab4b680247e7836072184592d4666d5309e8d236b510ad1cd0d80a3d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6871b188ab4b680247e7836072184592d4666d5309e8d236b510ad1cd0d80a3d"} {"level":"debug","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6871b188ab4b680247e7836072184592d4666d5309e8d236b510ad1cd0d80a3d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6871b188ab4b680247e7836072184592d4666d5309e8d236b510ad1cd0d80a3d"} {"level":"debug","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6871b188ab4b680247e7836072184592d4666d5309e8d236b510ad1cd0d80a3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6871b188ab4b680247e7836072184592d4666d5309e8d236b510ad1cd0d80a3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6871b188ab4b680247e7836072184592d4666d5309e8d236b510ad1cd0d80a3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6871b188ab4b680247e7836072184592d4666d5309e8d236b510ad1cd0d80a3d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6871b188ab4b680247e7836072184592d4666d5309e8d236b510ad1cd0d80a3d"} {"level":"debug","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638"} {"level":"debug","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638"} {"level":"debug","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a966bde76cb45a38899f04311a8bf33db39c53dfce4fa0d192c6afbc67d0814","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a966bde76cb45a38899f04311a8bf33db39c53dfce4fa0d192c6afbc67d0814"} {"level":"info","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a966bde76cb45a38899f04311a8bf33db39c53dfce4fa0d192c6afbc67d0814","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a966bde76cb45a38899f04311a8bf33db39c53dfce4fa0d192c6afbc67d0814","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a966bde76cb45a38899f04311a8bf33db39c53dfce4fa0d192c6afbc67d0814"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638"} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a966bde76cb45a38899f04311a8bf33db39c53dfce4fa0d192c6afbc67d0814","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a966bde76cb45a38899f04311a8bf33db39c53dfce4fa0d192c6afbc67d0814"} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a966bde76cb45a38899f04311a8bf33db39c53dfce4fa0d192c6afbc67d0814","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638"} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ba8af0c1af356832c57fec068e0cf8d53c639d8db3694c342610d5c006a8d44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a966bde76cb45a38899f04311a8bf33db39c53dfce4fa0d192c6afbc67d0814"} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ba8af0c1af356832c57fec068e0cf8d53c639d8db3694c342610d5c006a8d44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ba8af0c1af356832c57fec068e0cf8d53c639d8db3694c342610d5c006a8d44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ba8af0c1af356832c57fec068e0cf8d53c639d8db3694c342610d5c006a8d44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638"} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ba8af0c1af356832c57fec068e0cf8d53c639d8db3694c342610d5c006a8d44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ba8af0c1af356832c57fec068e0cf8d53c639d8db3694c342610d5c006a8d44"} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ba8af0c1af356832c57fec068e0cf8d53c639d8db3694c342610d5c006a8d44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ba8af0c1af356832c57fec068e0cf8d53c639d8db3694c342610d5c006a8d44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ba8af0c1af356832c57fec068e0cf8d53c639d8db3694c342610d5c006a8d44"} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ba8af0c1af356832c57fec068e0cf8d53c639d8db3694c342610d5c006a8d44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ba8af0c1af356832c57fec068e0cf8d53c639d8db3694c342610d5c006a8d44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638"} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ba8af0c1af356832c57fec068e0cf8d53c639d8db3694c342610d5c006a8d44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ba8af0c1af356832c57fec068e0cf8d53c639d8db3694c342610d5c006a8d44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ba8af0c1af356832c57fec068e0cf8d53c639d8db3694c342610d5c006a8d44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ba8af0c1af356832c57fec068e0cf8d53c639d8db3694c342610d5c006a8d44","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ba8af0c1af356832c57fec068e0cf8d53c639d8db3694c342610d5c006a8d44"} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ba8af0c1af356832c57fec068e0cf8d53c639d8db3694c342610d5c006a8d44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ba8af0c1af356832c57fec068e0cf8d53c639d8db3694c342610d5c006a8d44","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ba8af0c1af356832c57fec068e0cf8d53c639d8db3694c342610d5c006a8d44"} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de447724566ef7070711a9b620013b20d5891ad66e579f2f34d0036bd3fec1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de447724566ef7070711a9b620013b20d5891ad66e579f2f34d0036bd3fec1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de447724566ef7070711a9b620013b20d5891ad66e579f2f34d0036bd3fec1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de447724566ef7070711a9b620013b20d5891ad66e579f2f34d0036bd3fec1e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de447724566ef7070711a9b620013b20d5891ad66e579f2f34d0036bd3fec1e"} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ba8af0c1af356832c57fec068e0cf8d53c639d8db3694c342610d5c006a8d44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ba8af0c1af356832c57fec068e0cf8d53c639d8db3694c342610d5c006a8d44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de447724566ef7070711a9b620013b20d5891ad66e579f2f34d0036bd3fec1e"} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ba8af0c1af356832c57fec068e0cf8d53c639d8db3694c342610d5c006a8d44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de447724566ef7070711a9b620013b20d5891ad66e579f2f34d0036bd3fec1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de447724566ef7070711a9b620013b20d5891ad66e579f2f34d0036bd3fec1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de447724566ef7070711a9b620013b20d5891ad66e579f2f34d0036bd3fec1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ba8af0c1af356832c57fec068e0cf8d53c639d8db3694c342610d5c006a8d44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ba8af0c1af356832c57fec068e0cf8d53c639d8db3694c342610d5c006a8d44"} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ba8af0c1af356832c57fec068e0cf8d53c639d8db3694c342610d5c006a8d44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de447724566ef7070711a9b620013b20d5891ad66e579f2f34d0036bd3fec1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de447724566ef7070711a9b620013b20d5891ad66e579f2f34d0036bd3fec1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ba8af0c1af356832c57fec068e0cf8d53c639d8db3694c342610d5c006a8d44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ba8af0c1af356832c57fec068e0cf8d53c639d8db3694c342610d5c006a8d44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de447724566ef7070711a9b620013b20d5891ad66e579f2f34d0036bd3fec1e"} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ba8af0c1af356832c57fec068e0cf8d53c639d8db3694c342610d5c006a8d44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de447724566ef7070711a9b620013b20d5891ad66e579f2f34d0036bd3fec1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de447724566ef7070711a9b620013b20d5891ad66e579f2f34d0036bd3fec1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ba8af0c1af356832c57fec068e0cf8d53c639d8db3694c342610d5c006a8d44"} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de447724566ef7070711a9b620013b20d5891ad66e579f2f34d0036bd3fec1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d63020ce1e29e04884600f26a93b9fafaedb641754d20e83beeb79fcaf67110","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d63020ce1e29e04884600f26a93b9fafaedb641754d20e83beeb79fcaf67110","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ba8af0c1af356832c57fec068e0cf8d53c639d8db3694c342610d5c006a8d44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de447724566ef7070711a9b620013b20d5891ad66e579f2f34d0036bd3fec1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d63020ce1e29e04884600f26a93b9fafaedb641754d20e83beeb79fcaf67110","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d63020ce1e29e04884600f26a93b9fafaedb641754d20e83beeb79fcaf67110"} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d63020ce1e29e04884600f26a93b9fafaedb641754d20e83beeb79fcaf67110","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d63020ce1e29e04884600f26a93b9fafaedb641754d20e83beeb79fcaf67110"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d63020ce1e29e04884600f26a93b9fafaedb641754d20e83beeb79fcaf67110","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d63020ce1e29e04884600f26a93b9fafaedb641754d20e83beeb79fcaf67110","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de447724566ef7070711a9b620013b20d5891ad66e579f2f34d0036bd3fec1e"} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ba8af0c1af356832c57fec068e0cf8d53c639d8db3694c342610d5c006a8d44"} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d63020ce1e29e04884600f26a93b9fafaedb641754d20e83beeb79fcaf67110"} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770"} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6"} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770"} {"level":"error","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6"} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770"} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6"} {"level":"error","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770"} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6"} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770"} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6"} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770"} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6"} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770"} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6"} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770"} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6"} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770"} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6"} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770"} {"level":"info","ts":"2026-07-07T18:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6"} {"level":"info","ts":"2026-07-07T18:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770"} {"level":"debug","ts":"2026-07-07T18:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6"} {"level":"info","ts":"2026-07-07T18:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770"} {"level":"info","ts":"2026-07-07T18:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770"} {"level":"info","ts":"2026-07-07T18:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770"} {"level":"error","ts":"2026-07-07T18:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T18:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856"} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856"} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856"} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856"} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6871b188ab4b680247e7836072184592d4666d5309e8d236b510ad1cd0d80a3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856"} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6871b188ab4b680247e7836072184592d4666d5309e8d236b510ad1cd0d80a3d"} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856"} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856"} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d31d56eb1cbbfb9bc69f3e10ce3351f59b1c11ba52ca5c83f088fee4fe633ad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d31d56eb1cbbfb9bc69f3e10ce3351f59b1c11ba52ca5c83f088fee4fe633ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d31d56eb1cbbfb9bc69f3e10ce3351f59b1c11ba52ca5c83f088fee4fe633ad6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d31d56eb1cbbfb9bc69f3e10ce3351f59b1c11ba52ca5c83f088fee4fe633ad6"} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d31d56eb1cbbfb9bc69f3e10ce3351f59b1c11ba52ca5c83f088fee4fe633ad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d31d56eb1cbbfb9bc69f3e10ce3351f59b1c11ba52ca5c83f088fee4fe633ad6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d31d56eb1cbbfb9bc69f3e10ce3351f59b1c11ba52ca5c83f088fee4fe633ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d31d56eb1cbbfb9bc69f3e10ce3351f59b1c11ba52ca5c83f088fee4fe633ad6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856"} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d31d56eb1cbbfb9bc69f3e10ce3351f59b1c11ba52ca5c83f088fee4fe633ad6"} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638"} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638"} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:21:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:21:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe78ed315194f8e65805b8d98cca28474fbd6391e0c062d32ccd3f4b43f48d20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad598cb5e40d0568c0bf112e9fdd894f400169ae3e38eff81f7def0b89da1c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638"} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:21:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:21:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe78ed315194f8e65805b8d98cca28474fbd6391e0c062d32ccd3f4b43f48d20"} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad598cb5e40d0568c0bf112e9fdd894f400169ae3e38eff81f7def0b89da1c9e"} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638"} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ba8af0c1af356832c57fec068e0cf8d53c639d8db3694c342610d5c006a8d44","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770"} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eedda13767381738c8aafe12a39f83324c399d2297e3e92d01310dcb21de776e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ba8af0c1af356832c57fec068e0cf8d53c639d8db3694c342610d5c006a8d44"} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"488357b7ed8b7be5a0787c53a1669a6d8e668006a700c56616f8173bdeeb6a4f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eedda13767381738c8aafe12a39f83324c399d2297e3e92d01310dcb21de776e"} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de447724566ef7070711a9b620013b20d5891ad66e579f2f34d0036bd3fec1e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126"} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6"} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e1bff518894cdb9f64ececaa9c7fc3821af15eb4cf6f50ddff69a1884410666","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/488357b7ed8b7be5a0787c53a1669a6d8e668006a700c56616f8173bdeeb6a4f"} {"level":"debug","ts":"2026-07-07T18:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a966bde76cb45a38899f04311a8bf33db39c53dfce4fa0d192c6afbc67d0814","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52230aabaab09cfb7513ef55a7ad4959e24ef04a143562c9f66b569105a68c29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de447724566ef7070711a9b620013b20d5891ad66e579f2f34d0036bd3fec1e"} {"level":"debug","ts":"2026-07-07T18:21:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11617ed4413d20f6eeff70e8e4f9b734fd0a358f4afa4d31ab78e75d15d9fc16","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015"} {"level":"debug","ts":"2026-07-07T18:21:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e1bff518894cdb9f64ececaa9c7fc3821af15eb4cf6f50ddff69a1884410666"} {"level":"debug","ts":"2026-07-07T18:21:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3633783c2a10ac7fd33378e285dcc3cc7aeeae9f9efeef17b6a024241674f629","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a966bde76cb45a38899f04311a8bf33db39c53dfce4fa0d192c6afbc67d0814"} {"level":"debug","ts":"2026-07-07T18:21:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4a9ba0b640a078a52676f32281a4d5ff5072e0db865656325c53f5b51df9bfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52230aabaab09cfb7513ef55a7ad4959e24ef04a143562c9f66b569105a68c29"} {"level":"debug","ts":"2026-07-07T18:21:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T18:21:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d63020ce1e29e04884600f26a93b9fafaedb641754d20e83beeb79fcaf67110","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T18:21:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11617ed4413d20f6eeff70e8e4f9b734fd0a358f4afa4d31ab78e75d15d9fc16"} {"level":"info","ts":"2026-07-07T18:21:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596"} {"level":"info","ts":"2026-07-07T18:21:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3633783c2a10ac7fd33378e285dcc3cc7aeeae9f9efeef17b6a024241674f629"} {"level":"info","ts":"2026-07-07T18:21:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4a9ba0b640a078a52676f32281a4d5ff5072e0db865656325c53f5b51df9bfa"} {"level":"info","ts":"2026-07-07T18:21:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6"} {"level":"info","ts":"2026-07-07T18:21:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604"} {"level":"info","ts":"2026-07-07T18:21:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d63020ce1e29e04884600f26a93b9fafaedb641754d20e83beeb79fcaf67110"} {"level":"info","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d95e101-9603-469c-a00b-ec23b8a3bad3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35884","PortSpecifier":{"PortValue":35884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d95e101-9603-469c-a00b-ec23b8a3bad3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d95e101-9603-469c-a00b-ec23b8a3bad3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35884","PortSpecifier":{"PortValue":35884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448493,"nanos":183458619},"http":{"id":"2d95e101-9603-469c-a00b-ec23b8a3bad3","method":"POST","headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2d95e101-9603-469c-a00b-ec23b8a3bad3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d95e101-9603-469c-a00b-ec23b8a3bad3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"]}} {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d95e101-9603-469c-a00b-ec23b8a3bad3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d95e101-9603-469c-a00b-ec23b8a3bad3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d95e101-9603-469c-a00b-ec23b8a3bad3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d95e101-9603-469c-a00b-ec23b8a3bad3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a68ed4/rate-test-model-a68ed4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2d95e101-9603-469c-a00b-ec23b8a3bad3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d95e101-9603-469c-a00b-ec23b8a3bad3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d95e101-9603-469c-a00b-ec23b8a3bad3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d95e101-9603-469c-a00b-ec23b8a3bad3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d95e101-9603-469c-a00b-ec23b8a3bad3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e47d2b1-82c0-4c88-8947-79247deea34e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53584","PortSpecifier":{"PortValue":53584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e47d2b1-82c0-4c88-8947-79247deea34e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e47d2b1-82c0-4c88-8947-79247deea34e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53584","PortSpecifier":{"PortValue":53584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448493,"nanos":257084460},"http":{"id":"9e47d2b1-82c0-4c88-8947-79247deea34e","method":"POST","headers":{":authority":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9e47d2b1-82c0-4c88-8947-79247deea34e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e47d2b1-82c0-4c88-8947-79247deea34e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"]}} {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e47d2b1-82c0-4c88-8947-79247deea34e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e47d2b1-82c0-4c88-8947-79247deea34e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e47d2b1-82c0-4c88-8947-79247deea34e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e47d2b1-82c0-4c88-8947-79247deea34e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bc5a1a/rate-test-model-bc5a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9e47d2b1-82c0-4c88-8947-79247deea34e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e47d2b1-82c0-4c88-8947-79247deea34e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e47d2b1-82c0-4c88-8947-79247deea34e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e47d2b1-82c0-4c88-8947-79247deea34e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e47d2b1-82c0-4c88-8947-79247deea34e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1c085a4-662b-42c9-9c1a-382327b7501b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35888","PortSpecifier":{"PortValue":35888}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1c085a4-662b-42c9-9c1a-382327b7501b","method":"POST","path":"/ai-tenant-e2e-shared-a-a68ed4/rate-test-model-a68ed4/v1/completions","host":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1c085a4-662b-42c9-9c1a-382327b7501b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35888","PortSpecifier":{"PortValue":35888}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448493,"nanos":303809555},"http":{"id":"c1c085a4-662b-42c9-9c1a-382327b7501b","method":"POST","headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a68ed4/rate-test-model-a68ed4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1c085a4-662b-42c9-9c1a-382327b7501b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12siJzrWCv80ZzTqV_SbG0jwq4bgk07q7NEljqIrQKNoQBTHmVKeAy6K9t1qq"} {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1c085a4-662b-42c9-9c1a-382327b7501b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a68ed4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-12siJzrWCv80ZzTqV_SbG0jwq4bgk07q7NEljqIrQKNoQBTHmVKeAy6K9t1qq\"}"} {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1c085a4-662b-42c9-9c1a-382327b7501b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a68ed4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7c50071c-9dd6-4085-b2f2-8ec7a6667aae","keyName":"e2e-rate-a-9d1a85","subscription":"e2e-rate-iso-a-9d1a85","tenant":"e2e-shared-a-a68ed4","userId":"7c50071c-9dd6-4085-b2f2-8ec7a6667aae","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1c085a4-662b-42c9-9c1a-382327b7501b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a68ed4.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a68ed4/rate-test-model-a68ed4\",\"requestedSubscription\":\"e2e-rate-iso-a-9d1a85\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1c085a4-662b-42c9-9c1a-382327b7501b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a68ed4.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a68ed4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9d1a85","namespace":"ai-tenant-e2e-shared-a-a68ed4","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1c085a4-662b-42c9-9c1a-382327b7501b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1c085a4-662b-42c9-9c1a-382327b7501b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1c085a4-662b-42c9-9c1a-382327b7501b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1c085a4-662b-42c9-9c1a-382327b7501b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a68ed4/rate-test-model-a68ed4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1c085a4-662b-42c9-9c1a-382327b7501b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1c085a4-662b-42c9-9c1a-382327b7501b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1c085a4-662b-42c9-9c1a-382327b7501b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1c085a4-662b-42c9-9c1a-382327b7501b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9d1a85"} {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1c085a4-662b-42c9-9c1a-382327b7501b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7c50071c-9dd6-4085-b2f2-8ec7a6667aae","keyName":"e2e-rate-a-9d1a85","selected_subscription":"e2e-rate-iso-a-9d1a85","selected_subscription_key":"ai-tenant-e2e-shared-a-a68ed4/e2e-rate-iso-a-9d1a85@ai-tenant-e2e-shared-a-a68ed4/rate-test-model-a68ed4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a68ed4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9d1a85","namespace":"ai-tenant-e2e-shared-a-a68ed4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1c085a4-662b-42c9-9c1a-382327b7501b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:21:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1c085a4-662b-42c9-9c1a-382327b7501b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:21:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54aa5f56-59da-4884-ad34-ff7758e59627","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35892","PortSpecifier":{"PortValue":35892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"54aa5f56-59da-4884-ad34-ff7758e59627","method":"POST","path":"/ai-tenant-e2e-shared-a-a68ed4/rate-test-model-a68ed4/v1/completions","host":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:21:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54aa5f56-59da-4884-ad34-ff7758e59627","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35892","PortSpecifier":{"PortValue":35892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448494,"nanos":373748110},"http":{"id":"54aa5f56-59da-4884-ad34-ff7758e59627","method":"POST","headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a68ed4/rate-test-model-a68ed4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:21:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"54aa5f56-59da-4884-ad34-ff7758e59627","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12siJzrWCv80ZzTqV_SbG0jwq4bgk07q7NEljqIrQKNoQBTHmVKeAy6K9t1qq"} {"level":"debug","ts":"2026-07-07T18:21:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"54aa5f56-59da-4884-ad34-ff7758e59627","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a68ed4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-12siJzrWCv80ZzTqV_SbG0jwq4bgk07q7NEljqIrQKNoQBTHmVKeAy6K9t1qq\"}"} {"level":"debug","ts":"2026-07-07T18:21:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"54aa5f56-59da-4884-ad34-ff7758e59627","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a68ed4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7c50071c-9dd6-4085-b2f2-8ec7a6667aae","keyName":"e2e-rate-a-9d1a85","subscription":"e2e-rate-iso-a-9d1a85","tenant":"e2e-shared-a-a68ed4","userId":"7c50071c-9dd6-4085-b2f2-8ec7a6667aae","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T18:21:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"54aa5f56-59da-4884-ad34-ff7758e59627","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a68ed4.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a68ed4/rate-test-model-a68ed4\",\"requestedSubscription\":\"e2e-rate-iso-a-9d1a85\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T18:21:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"54aa5f56-59da-4884-ad34-ff7758e59627","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a68ed4.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a68ed4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9d1a85","namespace":"ai-tenant-e2e-shared-a-a68ed4","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T18:21:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"54aa5f56-59da-4884-ad34-ff7758e59627","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:21:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54aa5f56-59da-4884-ad34-ff7758e59627","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54aa5f56-59da-4884-ad34-ff7758e59627","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54aa5f56-59da-4884-ad34-ff7758e59627","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a68ed4/rate-test-model-a68ed4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54aa5f56-59da-4884-ad34-ff7758e59627","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54aa5f56-59da-4884-ad34-ff7758e59627","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T18:21:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54aa5f56-59da-4884-ad34-ff7758e59627","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T18:21:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54aa5f56-59da-4884-ad34-ff7758e59627","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9d1a85"} {"level":"debug","ts":"2026-07-07T18:21:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54aa5f56-59da-4884-ad34-ff7758e59627","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7c50071c-9dd6-4085-b2f2-8ec7a6667aae","keyName":"e2e-rate-a-9d1a85","selected_subscription":"e2e-rate-iso-a-9d1a85","selected_subscription_key":"ai-tenant-e2e-shared-a-a68ed4/e2e-rate-iso-a-9d1a85@ai-tenant-e2e-shared-a-a68ed4/rate-test-model-a68ed4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a68ed4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9d1a85","namespace":"ai-tenant-e2e-shared-a-a68ed4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T18:21:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54aa5f56-59da-4884-ad34-ff7758e59627","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:21:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54aa5f56-59da-4884-ad34-ff7758e59627","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:21:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e799d8d6-dc96-43fc-b203-0b93192f2daa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35900","PortSpecifier":{"PortValue":35900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e799d8d6-dc96-43fc-b203-0b93192f2daa","method":"POST","path":"/ai-tenant-e2e-shared-a-a68ed4/rate-test-model-a68ed4/v1/completions","host":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:21:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e799d8d6-dc96-43fc-b203-0b93192f2daa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35900","PortSpecifier":{"PortValue":35900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448495,"nanos":411659114},"http":{"id":"e799d8d6-dc96-43fc-b203-0b93192f2daa","method":"POST","headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a68ed4/rate-test-model-a68ed4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:21:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e799d8d6-dc96-43fc-b203-0b93192f2daa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12siJzrWCv80ZzTqV_SbG0jwq4bgk07q7NEljqIrQKNoQBTHmVKeAy6K9t1qq"} {"level":"debug","ts":"2026-07-07T18:21:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e799d8d6-dc96-43fc-b203-0b93192f2daa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a68ed4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-12siJzrWCv80ZzTqV_SbG0jwq4bgk07q7NEljqIrQKNoQBTHmVKeAy6K9t1qq\"}"} {"level":"debug","ts":"2026-07-07T18:21:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e799d8d6-dc96-43fc-b203-0b93192f2daa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a68ed4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7c50071c-9dd6-4085-b2f2-8ec7a6667aae","keyName":"e2e-rate-a-9d1a85","subscription":"e2e-rate-iso-a-9d1a85","tenant":"e2e-shared-a-a68ed4","userId":"7c50071c-9dd6-4085-b2f2-8ec7a6667aae","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T18:21:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e799d8d6-dc96-43fc-b203-0b93192f2daa","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a68ed4.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a68ed4/rate-test-model-a68ed4\",\"requestedSubscription\":\"e2e-rate-iso-a-9d1a85\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T18:21:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e799d8d6-dc96-43fc-b203-0b93192f2daa","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a68ed4.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a68ed4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9d1a85","namespace":"ai-tenant-e2e-shared-a-a68ed4","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T18:21:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e799d8d6-dc96-43fc-b203-0b93192f2daa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:21:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e799d8d6-dc96-43fc-b203-0b93192f2daa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e799d8d6-dc96-43fc-b203-0b93192f2daa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e799d8d6-dc96-43fc-b203-0b93192f2daa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a68ed4/rate-test-model-a68ed4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e799d8d6-dc96-43fc-b203-0b93192f2daa","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e799d8d6-dc96-43fc-b203-0b93192f2daa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T18:21:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e799d8d6-dc96-43fc-b203-0b93192f2daa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9d1a85"} {"level":"debug","ts":"2026-07-07T18:21:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e799d8d6-dc96-43fc-b203-0b93192f2daa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T18:21:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e799d8d6-dc96-43fc-b203-0b93192f2daa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7c50071c-9dd6-4085-b2f2-8ec7a6667aae","keyName":"e2e-rate-a-9d1a85","selected_subscription":"e2e-rate-iso-a-9d1a85","selected_subscription_key":"ai-tenant-e2e-shared-a-a68ed4/e2e-rate-iso-a-9d1a85@ai-tenant-e2e-shared-a-a68ed4/rate-test-model-a68ed4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a68ed4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9d1a85","namespace":"ai-tenant-e2e-shared-a-a68ed4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T18:21:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e799d8d6-dc96-43fc-b203-0b93192f2daa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:21:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e799d8d6-dc96-43fc-b203-0b93192f2daa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1b70ad7-3c51-44e3-8c57-098f80d682ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59256","PortSpecifier":{"PortValue":59256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b1b70ad7-3c51-44e3-8c57-098f80d682ed","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1b70ad7-3c51-44e3-8c57-098f80d682ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59256","PortSpecifier":{"PortValue":59256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448508,"nanos":599167333},"http":{"id":"b1b70ad7-3c51-44e3-8c57-098f80d682ed","method":"POST","headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b1b70ad7-3c51-44e3-8c57-098f80d682ed","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b1b70ad7-3c51-44e3-8c57-098f80d682ed","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"]}} {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b1b70ad7-3c51-44e3-8c57-098f80d682ed","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1b70ad7-3c51-44e3-8c57-098f80d682ed","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1b70ad7-3c51-44e3-8c57-098f80d682ed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1b70ad7-3c51-44e3-8c57-098f80d682ed","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a68ed4/rate-test-model-a68ed4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b1b70ad7-3c51-44e3-8c57-098f80d682ed","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1b70ad7-3c51-44e3-8c57-098f80d682ed","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1b70ad7-3c51-44e3-8c57-098f80d682ed","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1b70ad7-3c51-44e3-8c57-098f80d682ed","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1b70ad7-3c51-44e3-8c57-098f80d682ed","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc1adc0c-8c5e-48aa-88fa-0a735ae5113d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44890","PortSpecifier":{"PortValue":44890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dc1adc0c-8c5e-48aa-88fa-0a735ae5113d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc1adc0c-8c5e-48aa-88fa-0a735ae5113d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44890","PortSpecifier":{"PortValue":44890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448508,"nanos":645705526},"http":{"id":"dc1adc0c-8c5e-48aa-88fa-0a735ae5113d","method":"POST","headers":{":authority":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dc1adc0c-8c5e-48aa-88fa-0a735ae5113d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dc1adc0c-8c5e-48aa-88fa-0a735ae5113d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"]}} {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dc1adc0c-8c5e-48aa-88fa-0a735ae5113d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aca91c1ff11d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06040a04-7377-41bc-ac13-19c0b6baf5e5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"22f40f2c-26e1-48b5-be1a-a550ffd92de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc1adc0c-8c5e-48aa-88fa-0a735ae5113d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc1adc0c-8c5e-48aa-88fa-0a735ae5113d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc1adc0c-8c5e-48aa-88fa-0a735ae5113d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bc5a1a/rate-test-model-bc5a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dc1adc0c-8c5e-48aa-88fa-0a735ae5113d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc1adc0c-8c5e-48aa-88fa-0a735ae5113d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc1adc0c-8c5e-48aa-88fa-0a735ae5113d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc1adc0c-8c5e-48aa-88fa-0a735ae5113d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc1adc0c-8c5e-48aa-88fa-0a735ae5113d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1aaa6294-8637-4ebc-9a21-4ff004ee908f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59270","PortSpecifier":{"PortValue":59270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1aaa6294-8637-4ebc-9a21-4ff004ee908f","method":"POST","path":"/ai-tenant-e2e-shared-a-a68ed4/rate-test-model-a68ed4/v1/completions","host":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1aaa6294-8637-4ebc-9a21-4ff004ee908f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59270","PortSpecifier":{"PortValue":59270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448508,"nanos":686486192},"http":{"id":"1aaa6294-8637-4ebc-9a21-4ff004ee908f","method":"POST","headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a68ed4/rate-test-model-a68ed4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1aaa6294-8637-4ebc-9a21-4ff004ee908f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11hCyLjAgI5RwjeSS_87Wn8M08Ru2utb11umwMH6zdiVIS1PODfqEu1yJfwRU"} {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1aaa6294-8637-4ebc-9a21-4ff004ee908f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a68ed4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11hCyLjAgI5RwjeSS_87Wn8M08Ru2utb11umwMH6zdiVIS1PODfqEu1yJfwRU\"}"} {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1aaa6294-8637-4ebc-9a21-4ff004ee908f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a68ed4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"97c7d7ab-be28-4f98-ad24-7264095c5d40","keyName":"e2e-rate-a-563aee","subscription":"e2e-rate-iso-a-563aee","tenant":"e2e-shared-a-a68ed4","userId":"97c7d7ab-be28-4f98-ad24-7264095c5d40","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1aaa6294-8637-4ebc-9a21-4ff004ee908f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a68ed4.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a68ed4/rate-test-model-a68ed4\",\"requestedSubscription\":\"e2e-rate-iso-a-563aee\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1aaa6294-8637-4ebc-9a21-4ff004ee908f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a68ed4.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a68ed4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-563aee","namespace":"ai-tenant-e2e-shared-a-a68ed4","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1aaa6294-8637-4ebc-9a21-4ff004ee908f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1aaa6294-8637-4ebc-9a21-4ff004ee908f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1aaa6294-8637-4ebc-9a21-4ff004ee908f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1aaa6294-8637-4ebc-9a21-4ff004ee908f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1aaa6294-8637-4ebc-9a21-4ff004ee908f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a68ed4/rate-test-model-a68ed4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1aaa6294-8637-4ebc-9a21-4ff004ee908f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1aaa6294-8637-4ebc-9a21-4ff004ee908f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-563aee"} {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1aaa6294-8637-4ebc-9a21-4ff004ee908f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1aaa6294-8637-4ebc-9a21-4ff004ee908f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"97c7d7ab-be28-4f98-ad24-7264095c5d40","keyName":"e2e-rate-a-563aee","selected_subscription":"e2e-rate-iso-a-563aee","selected_subscription_key":"ai-tenant-e2e-shared-a-a68ed4/e2e-rate-iso-a-563aee@ai-tenant-e2e-shared-a-a68ed4/rate-test-model-a68ed4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a68ed4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-563aee","namespace":"ai-tenant-e2e-shared-a-a68ed4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1aaa6294-8637-4ebc-9a21-4ff004ee908f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:21:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1aaa6294-8637-4ebc-9a21-4ff004ee908f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:21:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b281539c-cc3c-418d-8f99-6161c888b3f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59276","PortSpecifier":{"PortValue":59276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b281539c-cc3c-418d-8f99-6161c888b3f2","method":"POST","path":"/ai-tenant-e2e-shared-a-a68ed4/rate-test-model-a68ed4/v1/completions","host":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:21:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b281539c-cc3c-418d-8f99-6161c888b3f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59276","PortSpecifier":{"PortValue":59276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448509,"nanos":730821310},"http":{"id":"b281539c-cc3c-418d-8f99-6161c888b3f2","method":"POST","headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a68ed4/rate-test-model-a68ed4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:21:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b281539c-cc3c-418d-8f99-6161c888b3f2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11hCyLjAgI5RwjeSS_87Wn8M08Ru2utb11umwMH6zdiVIS1PODfqEu1yJfwRU"} {"level":"debug","ts":"2026-07-07T18:21:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b281539c-cc3c-418d-8f99-6161c888b3f2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a68ed4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11hCyLjAgI5RwjeSS_87Wn8M08Ru2utb11umwMH6zdiVIS1PODfqEu1yJfwRU\"}"} {"level":"debug","ts":"2026-07-07T18:21:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b281539c-cc3c-418d-8f99-6161c888b3f2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a68ed4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"97c7d7ab-be28-4f98-ad24-7264095c5d40","keyName":"e2e-rate-a-563aee","subscription":"e2e-rate-iso-a-563aee","tenant":"e2e-shared-a-a68ed4","userId":"97c7d7ab-be28-4f98-ad24-7264095c5d40","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T18:21:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b281539c-cc3c-418d-8f99-6161c888b3f2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a68ed4.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a68ed4/rate-test-model-a68ed4\",\"requestedSubscription\":\"e2e-rate-iso-a-563aee\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T18:21:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b281539c-cc3c-418d-8f99-6161c888b3f2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a68ed4.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a68ed4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-563aee","namespace":"ai-tenant-e2e-shared-a-a68ed4","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T18:21:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b281539c-cc3c-418d-8f99-6161c888b3f2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:21:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b281539c-cc3c-418d-8f99-6161c888b3f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b281539c-cc3c-418d-8f99-6161c888b3f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b281539c-cc3c-418d-8f99-6161c888b3f2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b281539c-cc3c-418d-8f99-6161c888b3f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a68ed4/rate-test-model-a68ed4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b281539c-cc3c-418d-8f99-6161c888b3f2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T18:21:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b281539c-cc3c-418d-8f99-6161c888b3f2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T18:21:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b281539c-cc3c-418d-8f99-6161c888b3f2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-563aee"} {"level":"debug","ts":"2026-07-07T18:21:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b281539c-cc3c-418d-8f99-6161c888b3f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"97c7d7ab-be28-4f98-ad24-7264095c5d40","keyName":"e2e-rate-a-563aee","selected_subscription":"e2e-rate-iso-a-563aee","selected_subscription_key":"ai-tenant-e2e-shared-a-a68ed4/e2e-rate-iso-a-563aee@ai-tenant-e2e-shared-a-a68ed4/rate-test-model-a68ed4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a68ed4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-563aee","namespace":"ai-tenant-e2e-shared-a-a68ed4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T18:21:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b281539c-cc3c-418d-8f99-6161c888b3f2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:21:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b281539c-cc3c-418d-8f99-6161c888b3f2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9224c5dd-f882-4937-a343-c7659c8ef882","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59280","PortSpecifier":{"PortValue":59280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9224c5dd-f882-4937-a343-c7659c8ef882","method":"POST","path":"/ai-tenant-e2e-shared-a-a68ed4/rate-test-model-a68ed4/v1/completions","host":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9224c5dd-f882-4937-a343-c7659c8ef882","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59280","PortSpecifier":{"PortValue":59280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448510,"nanos":769028567},"http":{"id":"9224c5dd-f882-4937-a343-c7659c8ef882","method":"POST","headers":{":authority":"e2e-shared-a-a68ed4.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a68ed4/rate-test-model-a68ed4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9224c5dd-f882-4937-a343-c7659c8ef882","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11hCyLjAgI5RwjeSS_87Wn8M08Ru2utb11umwMH6zdiVIS1PODfqEu1yJfwRU"} {"level":"debug","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9224c5dd-f882-4937-a343-c7659c8ef882","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a68ed4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11hCyLjAgI5RwjeSS_87Wn8M08Ru2utb11umwMH6zdiVIS1PODfqEu1yJfwRU\"}"} {"level":"debug","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9224c5dd-f882-4937-a343-c7659c8ef882","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a68ed4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"97c7d7ab-be28-4f98-ad24-7264095c5d40","keyName":"e2e-rate-a-563aee","subscription":"e2e-rate-iso-a-563aee","tenant":"e2e-shared-a-a68ed4","userId":"97c7d7ab-be28-4f98-ad24-7264095c5d40","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9224c5dd-f882-4937-a343-c7659c8ef882","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a68ed4.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a68ed4/rate-test-model-a68ed4\",\"requestedSubscription\":\"e2e-rate-iso-a-563aee\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9224c5dd-f882-4937-a343-c7659c8ef882","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a68ed4.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a68ed4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-563aee","namespace":"ai-tenant-e2e-shared-a-a68ed4","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9224c5dd-f882-4937-a343-c7659c8ef882","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9224c5dd-f882-4937-a343-c7659c8ef882","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9224c5dd-f882-4937-a343-c7659c8ef882","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9224c5dd-f882-4937-a343-c7659c8ef882","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a68ed4/rate-test-model-a68ed4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9224c5dd-f882-4937-a343-c7659c8ef882","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9224c5dd-f882-4937-a343-c7659c8ef882","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9224c5dd-f882-4937-a343-c7659c8ef882","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9224c5dd-f882-4937-a343-c7659c8ef882","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-563aee"} {"level":"debug","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9224c5dd-f882-4937-a343-c7659c8ef882","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"97c7d7ab-be28-4f98-ad24-7264095c5d40","keyName":"e2e-rate-a-563aee","selected_subscription":"e2e-rate-iso-a-563aee","selected_subscription_key":"ai-tenant-e2e-shared-a-a68ed4/e2e-rate-iso-a-563aee@ai-tenant-e2e-shared-a-a68ed4/rate-test-model-a68ed4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a68ed4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-563aee","namespace":"ai-tenant-e2e-shared-a-a68ed4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9224c5dd-f882-4937-a343-c7659c8ef882","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9224c5dd-f882-4937-a343-c7659c8ef882","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58c5fc44-1f8f-4d44-b1ff-45191f1ae332","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44898","PortSpecifier":{"PortValue":44898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"58c5fc44-1f8f-4d44-b1ff-45191f1ae332","method":"POST","path":"/ai-tenant-e2e-shared-b-bc5a1a/rate-test-model-bc5a1a/v1/completions","host":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58c5fc44-1f8f-4d44-b1ff-45191f1ae332","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44898","PortSpecifier":{"PortValue":44898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448510,"nanos":808825043},"http":{"id":"58c5fc44-1f8f-4d44-b1ff-45191f1ae332","method":"POST","headers":{":authority":"e2e-shared-b-bc5a1a.apps.b7936dde-0096-44f4-b6dc-aca91c1ff11d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-bc5a1a/rate-test-model-bc5a1a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"58c5fc44-1f8f-4d44-b1ff-45191f1ae332","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17wBy7inHxtV9PHZl_gAGqibfaeTEGy9vWczqUBwzbDsAkJAVY0lu8sSKNg4O"} {"level":"debug","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"58c5fc44-1f8f-4d44-b1ff-45191f1ae332","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-bc5a1a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17wBy7inHxtV9PHZl_gAGqibfaeTEGy9vWczqUBwzbDsAkJAVY0lu8sSKNg4O\"}"} {"level":"debug","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"58c5fc44-1f8f-4d44-b1ff-45191f1ae332","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-bc5a1a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d4e629c9-1e76-4b53-8af4-a10bd536b712","keyName":"e2e-rate-b-563aee","subscription":"e2e-rate-iso-b-563aee","tenant":"e2e-shared-b-bc5a1a","userId":"d4e629c9-1e76-4b53-8af4-a10bd536b712","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"58c5fc44-1f8f-4d44-b1ff-45191f1ae332","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-bc5a1a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-bc5a1a/rate-test-model-bc5a1a\",\"requestedSubscription\":\"e2e-rate-iso-b-563aee\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"58c5fc44-1f8f-4d44-b1ff-45191f1ae332","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-bc5a1a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bc5a1a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-563aee","namespace":"ai-tenant-e2e-shared-b-bc5a1a","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"58c5fc44-1f8f-4d44-b1ff-45191f1ae332","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58c5fc44-1f8f-4d44-b1ff-45191f1ae332","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58c5fc44-1f8f-4d44-b1ff-45191f1ae332","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58c5fc44-1f8f-4d44-b1ff-45191f1ae332","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bc5a1a/rate-test-model-bc5a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58c5fc44-1f8f-4d44-b1ff-45191f1ae332","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58c5fc44-1f8f-4d44-b1ff-45191f1ae332","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58c5fc44-1f8f-4d44-b1ff-45191f1ae332","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58c5fc44-1f8f-4d44-b1ff-45191f1ae332","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-563aee"} {"level":"debug","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58c5fc44-1f8f-4d44-b1ff-45191f1ae332","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d4e629c9-1e76-4b53-8af4-a10bd536b712","keyName":"e2e-rate-b-563aee","selected_subscription":"e2e-rate-iso-b-563aee","selected_subscription_key":"ai-tenant-e2e-shared-b-bc5a1a/e2e-rate-iso-b-563aee@ai-tenant-e2e-shared-b-bc5a1a/rate-test-model-bc5a1a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bc5a1a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-563aee","namespace":"ai-tenant-e2e-shared-b-bc5a1a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58c5fc44-1f8f-4d44-b1ff-45191f1ae332","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T18:21:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58c5fc44-1f8f-4d44-b1ff-45191f1ae332","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T18:21:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eedda13767381738c8aafe12a39f83324c399d2297e3e92d01310dcb21de776e"} {"level":"info","ts":"2026-07-07T18:21:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad598cb5e40d0568c0bf112e9fdd894f400169ae3e38eff81f7def0b89da1c9e"} {"level":"info","ts":"2026-07-07T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e1bff518894cdb9f64ececaa9c7fc3821af15eb4cf6f50ddff69a1884410666"} {"level":"info","ts":"2026-07-07T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d63020ce1e29e04884600f26a93b9fafaedb641754d20e83beeb79fcaf67110"} {"level":"info","ts":"2026-07-07T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a39cfb509532ef2c46f3de7e96a599c8f9abd0b243f806488237832e09242638"} {"level":"info","ts":"2026-07-07T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6871b188ab4b680247e7836072184592d4666d5309e8d236b510ad1cd0d80a3d"} {"level":"info","ts":"2026-07-07T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/488357b7ed8b7be5a0787c53a1669a6d8e668006a700c56616f8173bdeeb6a4f"} {"level":"info","ts":"2026-07-07T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4de447724566ef7070711a9b620013b20d5891ad66e579f2f34d0036bd3fec1e"} {"level":"info","ts":"2026-07-07T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc96c43905518011a1d8999e1fc3d194fc6204a0e33a2f54100e9c8fd282f604"} {"level":"info","ts":"2026-07-07T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4294af45c3146b358ee36d2d0792474357a921241d3d171128595f618efa1596"} {"level":"info","ts":"2026-07-07T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77e18a292ec539760977a12e0f754150703370c5bb44f14121513c0006fdc770"} {"level":"info","ts":"2026-07-07T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6e442d0c07df4a0a8f634fb3a96ef0ac132c84dc5b060fb0bc7c4292c5405e6"} {"level":"info","ts":"2026-07-07T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4a9ba0b640a078a52676f32281a4d5ff5072e0db865656325c53f5b51df9bfa"} {"level":"info","ts":"2026-07-07T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a966bde76cb45a38899f04311a8bf33db39c53dfce4fa0d192c6afbc67d0814"} {"level":"info","ts":"2026-07-07T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ba8af0c1af356832c57fec068e0cf8d53c639d8db3694c342610d5c006a8d44"} {"level":"info","ts":"2026-07-07T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11617ed4413d20f6eeff70e8e4f9b734fd0a358f4afa4d31ab78e75d15d9fc16"} {"level":"info","ts":"2026-07-07T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d31d56eb1cbbfb9bc69f3e10ce3351f59b1c11ba52ca5c83f088fee4fe633ad6"} {"level":"info","ts":"2026-07-07T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3d55a13395302464856a42785d51cb1346b93394c3105b1d99dc96c997cb7c6"} {"level":"info","ts":"2026-07-07T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc4878c4a2f9c49a8c0941e568a004b7531a98145f118afd0b15f9c340602856"} {"level":"info","ts":"2026-07-07T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/414deece46896f1deb4265fec567e4a19d748f4c014d0d7e76672d42a9c1f126"} {"level":"info","ts":"2026-07-07T18:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52230aabaab09cfb7513ef55a7ad4959e24ef04a143562c9f66b569105a68c29"} {"level":"info","ts":"2026-07-07T18:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b28a8747f1ddcc3ee72472dc5c334049a5dfd337a25c222aa46204a9136f015"} {"level":"info","ts":"2026-07-07T18:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3633783c2a10ac7fd33378e285dcc3cc7aeeae9f9efeef17b6a024241674f629"} {"level":"info","ts":"2026-07-07T18:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe78ed315194f8e65805b8d98cca28474fbd6391e0c062d32ccd3f4b43f48d20"}