--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-28T15:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"} {"level":"info","ts":"2026-07-28T15:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28a61a0e0f24bce3096aff51f430b2589402be49d3476d6c64a032da0a9803e4"} {"level":"info","ts":"2026-07-28T15:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391"} {"level":"info","ts":"2026-07-28T15:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02"} {"level":"info","ts":"2026-07-28T15:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e50d708f41882dfe023420957fd3d1bedf54fa717f52a658ec84aa870fa691c8"} {"level":"info","ts":"2026-07-28T15:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7"} {"level":"info","ts":"2026-07-28T15:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"info","ts":"2026-07-28T15:17:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/670c1ace397a0b631675327a6bdc190215acb884e62790ccbbe1db7f981abe9d"} {"level":"debug","ts":"2026-07-28T15:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:17:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:17:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"} {"level":"debug","ts":"2026-07-28T15:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"} {"level":"debug","ts":"2026-07-28T15:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:17:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:17:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891"} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891"} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891"} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02"} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02"} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02"} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7"} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02"} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7"} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50d708f41882dfe023420957fd3d1bedf54fa717f52a658ec84aa870fa691c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7"} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50d708f41882dfe023420957fd3d1bedf54fa717f52a658ec84aa870fa691c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50d708f41882dfe023420957fd3d1bedf54fa717f52a658ec84aa870fa691c8"} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50d708f41882dfe023420957fd3d1bedf54fa717f52a658ec84aa870fa691c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50d708f41882dfe023420957fd3d1bedf54fa717f52a658ec84aa870fa691c8"} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50d708f41882dfe023420957fd3d1bedf54fa717f52a658ec84aa870fa691c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7"} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e50d708f41882dfe023420957fd3d1bedf54fa717f52a658ec84aa870fa691c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50d708f41882dfe023420957fd3d1bedf54fa717f52a658ec84aa870fa691c8"} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7297f693d16479245c5178e2b366eaafb9a289afefc45520f0f94f254d9ffaf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7"} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7297f693d16479245c5178e2b366eaafb9a289afefc45520f0f94f254d9ffaf2"} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7297f693d16479245c5178e2b366eaafb9a289afefc45520f0f94f254d9ffaf2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7"} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50d708f41882dfe023420957fd3d1bedf54fa717f52a658ec84aa870fa691c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e50d708f41882dfe023420957fd3d1bedf54fa717f52a658ec84aa870fa691c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7297f693d16479245c5178e2b366eaafb9a289afefc45520f0f94f254d9ffaf2"} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50d708f41882dfe023420957fd3d1bedf54fa717f52a658ec84aa870fa691c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7297f693d16479245c5178e2b366eaafb9a289afefc45520f0f94f254d9ffaf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7297f693d16479245c5178e2b366eaafb9a289afefc45520f0f94f254d9ffaf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7"} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7297f693d16479245c5178e2b366eaafb9a289afefc45520f0f94f254d9ffaf2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50d708f41882dfe023420957fd3d1bedf54fa717f52a658ec84aa870fa691c8"} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e50d708f41882dfe023420957fd3d1bedf54fa717f52a658ec84aa870fa691c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7297f693d16479245c5178e2b366eaafb9a289afefc45520f0f94f254d9ffaf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7297f693d16479245c5178e2b366eaafb9a289afefc45520f0f94f254d9ffaf2"} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7297f693d16479245c5178e2b366eaafb9a289afefc45520f0f94f254d9ffaf2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7"} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7297f693d16479245c5178e2b366eaafb9a289afefc45520f0f94f254d9ffaf2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7297f693d16479245c5178e2b366eaafb9a289afefc45520f0f94f254d9ffaf2"} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7"} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f193cf17bcae9c9e69eedd4f5539ed19c8aabf27033f6890ac21b08afb4cd469"} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7297f693d16479245c5178e2b366eaafb9a289afefc45520f0f94f254d9ffaf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7297f693d16479245c5178e2b366eaafb9a289afefc45520f0f94f254d9ffaf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7"} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7297f693d16479245c5178e2b366eaafb9a289afefc45520f0f94f254d9ffaf2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f193cf17bcae9c9e69eedd4f5539ed19c8aabf27033f6890ac21b08afb4cd469","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f193cf17bcae9c9e69eedd4f5539ed19c8aabf27033f6890ac21b08afb4cd469"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f193cf17bcae9c9e69eedd4f5539ed19c8aabf27033f6890ac21b08afb4cd469","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7297f693d16479245c5178e2b366eaafb9a289afefc45520f0f94f254d9ffaf2"} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7297f693d16479245c5178e2b366eaafb9a289afefc45520f0f94f254d9ffaf2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f193cf17bcae9c9e69eedd4f5539ed19c8aabf27033f6890ac21b08afb4cd469","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f193cf17bcae9c9e69eedd4f5539ed19c8aabf27033f6890ac21b08afb4cd469"} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"error","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28a61a0e0f24bce3096aff51f430b2589402be49d3476d6c64a032da0a9803e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:17:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28a61a0e0f24bce3096aff51f430b2589402be49d3476d6c64a032da0a9803e4"} {"level":"info","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28a61a0e0f24bce3096aff51f430b2589402be49d3476d6c64a032da0a9803e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28a61a0e0f24bce3096aff51f430b2589402be49d3476d6c64a032da0a9803e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28a61a0e0f24bce3096aff51f430b2589402be49d3476d6c64a032da0a9803e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28a61a0e0f24bce3096aff51f430b2589402be49d3476d6c64a032da0a9803e4"} {"level":"debug","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28a61a0e0f24bce3096aff51f430b2589402be49d3476d6c64a032da0a9803e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28a61a0e0f24bce3096aff51f430b2589402be49d3476d6c64a032da0a9803e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28a61a0e0f24bce3096aff51f430b2589402be49d3476d6c64a032da0a9803e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28a61a0e0f24bce3096aff51f430b2589402be49d3476d6c64a032da0a9803e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28a61a0e0f24bce3096aff51f430b2589402be49d3476d6c64a032da0a9803e4"} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fb05f859e9953075f8809c25e0076f0b687020efd5dc99f65d3f3a5bf3327fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391"} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fb05f859e9953075f8809c25e0076f0b687020efd5dc99f65d3f3a5bf3327fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"670c1ace397a0b631675327a6bdc190215acb884e62790ccbbe1db7f981abe9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fb05f859e9953075f8809c25e0076f0b687020efd5dc99f65d3f3a5bf3327fa"} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"670c1ace397a0b631675327a6bdc190215acb884e62790ccbbe1db7f981abe9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fb05f859e9953075f8809c25e0076f0b687020efd5dc99f65d3f3a5bf3327fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fb05f859e9953075f8809c25e0076f0b687020efd5dc99f65d3f3a5bf3327fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/670c1ace397a0b631675327a6bdc190215acb884e62790ccbbe1db7f981abe9d"} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fb05f859e9953075f8809c25e0076f0b687020efd5dc99f65d3f3a5bf3327fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391"} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"670c1ace397a0b631675327a6bdc190215acb884e62790ccbbe1db7f981abe9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["670c1ace397a0b631675327a6bdc190215acb884e62790ccbbe1db7f981abe9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fb05f859e9953075f8809c25e0076f0b687020efd5dc99f65d3f3a5bf3327fa"} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"670c1ace397a0b631675327a6bdc190215acb884e62790ccbbe1db7f981abe9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fb05f859e9953075f8809c25e0076f0b687020efd5dc99f65d3f3a5bf3327fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/670c1ace397a0b631675327a6bdc190215acb884e62790ccbbe1db7f981abe9d"} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"670c1ace397a0b631675327a6bdc190215acb884e62790ccbbe1db7f981abe9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391"} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/670c1ace397a0b631675327a6bdc190215acb884e62790ccbbe1db7f981abe9d"} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391"} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391"} {"level":"error","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391"} {"level":"debug","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391"} {"level":"debug","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391"} {"level":"debug","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391"} {"level":"debug","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391"} {"level":"debug","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391"} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391"} {"level":"debug","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:17:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:17:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391"} {"level":"info","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16e07684-2f91-434d-82a9-8e268e204cb8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50066","PortSpecifier":{"PortValue":50066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"16e07684-2f91-434d-82a9-8e268e204cb8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16e07684-2f91-434d-82a9-8e268e204cb8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50066","PortSpecifier":{"PortValue":50066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785251871,"nanos":585224721},"http":{"id":"16e07684-2f91-434d-82a9-8e268e204cb8","method":"POST","headers":{":authority":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"16e07684-2f91-434d-82a9-8e268e204cb8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"16e07684-2f91-434d-82a9-8e268e204cb8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"dd71831b-4afb-48e1-a707-c0d301a2240b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a65def0-5b0b-4d55-8532-0cdc88dc1480"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/22bc79c9c7f1"]}} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"16e07684-2f91-434d-82a9-8e268e204cb8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/22bc79c9c7f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a65def0-5b0b-4d55-8532-0cdc88dc1480"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"dd71831b-4afb-48e1-a707-c0d301a2240b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"00b67e61508b1c4a3a360b213fe1ee4ace1d30b728cc26b8b1687b99fc16d00e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16e07684-2f91-434d-82a9-8e268e204cb8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16e07684-2f91-434d-82a9-8e268e204cb8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16e07684-2f91-434d-82a9-8e268e204cb8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d96a19/auth-test-model-d96a19\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d96a19/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"16e07684-2f91-434d-82a9-8e268e204cb8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16e07684-2f91-434d-82a9-8e268e204cb8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16e07684-2f91-434d-82a9-8e268e204cb8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16e07684-2f91-434d-82a9-8e268e204cb8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16e07684-2f91-434d-82a9-8e268e204cb8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b41b128b-3f7a-4f59-94ca-db8dab832f06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:42188","PortSpecifier":{"PortValue":42188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b41b128b-3f7a-4f59-94ca-db8dab832f06","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3edd55.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b41b128b-3f7a-4f59-94ca-db8dab832f06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:42188","PortSpecifier":{"PortValue":42188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785251871,"nanos":628449875},"http":{"id":"b41b128b-3f7a-4f59-94ca-db8dab832f06","method":"POST","headers":{":authority":"e2e-shared-b-3edd55.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b41b128b-3f7a-4f59-94ca-db8dab832f06","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b41b128b-3f7a-4f59-94ca-db8dab832f06","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"dd71831b-4afb-48e1-a707-c0d301a2240b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a65def0-5b0b-4d55-8532-0cdc88dc1480"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/22bc79c9c7f1"]}} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b41b128b-3f7a-4f59-94ca-db8dab832f06","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/22bc79c9c7f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a65def0-5b0b-4d55-8532-0cdc88dc1480"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"dd71831b-4afb-48e1-a707-c0d301a2240b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3edd55.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b41b128b-3f7a-4f59-94ca-db8dab832f06","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b41b128b-3f7a-4f59-94ca-db8dab832f06","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b41b128b-3f7a-4f59-94ca-db8dab832f06","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3edd55/auth-test-model-3edd55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3edd55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b41b128b-3f7a-4f59-94ca-db8dab832f06","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b41b128b-3f7a-4f59-94ca-db8dab832f06","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b41b128b-3f7a-4f59-94ca-db8dab832f06","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b41b128b-3f7a-4f59-94ca-db8dab832f06","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b41b128b-3f7a-4f59-94ca-db8dab832f06","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"edb1e551-4d3a-4d4e-a30e-5386d582bc85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:42192","PortSpecifier":{"PortValue":42192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"edb1e551-4d3a-4d4e-a30e-5386d582bc85","method":"GET","path":"/maas-api/v1/api-keys/41fc935c-f1c1-42bf-a224-7c047e4fb261","host":"e2e-shared-b-3edd55.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"edb1e551-4d3a-4d4e-a30e-5386d582bc85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:42192","PortSpecifier":{"PortValue":42192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785251871,"nanos":668908330},"http":{"id":"edb1e551-4d3a-4d4e-a30e-5386d582bc85","method":"GET","headers":{":authority":"e2e-shared-b-3edd55.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/41fc935c-f1c1-42bf-a224-7c047e4fb261",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"edb1e551-4d3a-4d4e-a30e-5386d582bc85","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"edb1e551-4d3a-4d4e-a30e-5386d582bc85","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"dd71831b-4afb-48e1-a707-c0d301a2240b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a65def0-5b0b-4d55-8532-0cdc88dc1480"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/22bc79c9c7f1"]}} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"edb1e551-4d3a-4d4e-a30e-5386d582bc85","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/22bc79c9c7f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a65def0-5b0b-4d55-8532-0cdc88dc1480"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"dd71831b-4afb-48e1-a707-c0d301a2240b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3edd55.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/41fc935c-f1c1-42bf-a224-7c047e4fb261",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edb1e551-4d3a-4d4e-a30e-5386d582bc85","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edb1e551-4d3a-4d4e-a30e-5386d582bc85","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edb1e551-4d3a-4d4e-a30e-5386d582bc85","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3edd55/auth-test-model-3edd55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3edd55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"edb1e551-4d3a-4d4e-a30e-5386d582bc85","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"edb1e551-4d3a-4d4e-a30e-5386d582bc85","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"edb1e551-4d3a-4d4e-a30e-5386d582bc85","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"edb1e551-4d3a-4d4e-a30e-5386d582bc85","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"edb1e551-4d3a-4d4e-a30e-5386d582bc85","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ff616f1-9ae1-4ebf-9433-3d45414d064f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50080","PortSpecifier":{"PortValue":50080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7ff616f1-9ae1-4ebf-9433-3d45414d064f","method":"GET","path":"/maas-api/v1/api-keys/41fc935c-f1c1-42bf-a224-7c047e4fb261","host":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ff616f1-9ae1-4ebf-9433-3d45414d064f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50080","PortSpecifier":{"PortValue":50080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785251871,"nanos":705934190},"http":{"id":"7ff616f1-9ae1-4ebf-9433-3d45414d064f","method":"GET","headers":{":authority":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/41fc935c-f1c1-42bf-a224-7c047e4fb261",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7ff616f1-9ae1-4ebf-9433-3d45414d064f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7ff616f1-9ae1-4ebf-9433-3d45414d064f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"dd71831b-4afb-48e1-a707-c0d301a2240b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a65def0-5b0b-4d55-8532-0cdc88dc1480"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/22bc79c9c7f1"]}} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7ff616f1-9ae1-4ebf-9433-3d45414d064f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/22bc79c9c7f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a65def0-5b0b-4d55-8532-0cdc88dc1480"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"dd71831b-4afb-48e1-a707-c0d301a2240b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"00b67e61508b1c4a3a360b213fe1ee4ace1d30b728cc26b8b1687b99fc16d00e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/41fc935c-f1c1-42bf-a224-7c047e4fb261",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ff616f1-9ae1-4ebf-9433-3d45414d064f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ff616f1-9ae1-4ebf-9433-3d45414d064f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ff616f1-9ae1-4ebf-9433-3d45414d064f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d96a19/auth-test-model-d96a19\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d96a19/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7ff616f1-9ae1-4ebf-9433-3d45414d064f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ff616f1-9ae1-4ebf-9433-3d45414d064f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ff616f1-9ae1-4ebf-9433-3d45414d064f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ff616f1-9ae1-4ebf-9433-3d45414d064f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T15:17:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ff616f1-9ae1-4ebf-9433-3d45414d064f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T15:17:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7297f693d16479245c5178e2b366eaafb9a289afefc45520f0f94f254d9ffaf2"} {"level":"info","ts":"2026-07-28T15:17:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/670c1ace397a0b631675327a6bdc190215acb884e62790ccbbe1db7f981abe9d"} {"level":"info","ts":"2026-07-28T15:17:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"info","ts":"2026-07-28T15:17:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391"} {"level":"info","ts":"2026-07-28T15:17:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"} {"level":"info","ts":"2026-07-28T15:17:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f193cf17bcae9c9e69eedd4f5539ed19c8aabf27033f6890ac21b08afb4cd469"} {"level":"info","ts":"2026-07-28T15:17:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28a61a0e0f24bce3096aff51f430b2589402be49d3476d6c64a032da0a9803e4"} {"level":"info","ts":"2026-07-28T15:17:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891"} {"level":"info","ts":"2026-07-28T15:17:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7"} {"level":"info","ts":"2026-07-28T15:17:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fb05f859e9953075f8809c25e0076f0b687020efd5dc99f65d3f3a5bf3327fa"} {"level":"info","ts":"2026-07-28T15:17:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e50d708f41882dfe023420957fd3d1bedf54fa717f52a658ec84aa870fa691c8"} {"level":"info","ts":"2026-07-28T15:17:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02"} {"level":"debug","ts":"2026-07-28T15:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"670c1ace397a0b631675327a6bdc190215acb884e62790ccbbe1db7f981abe9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:18:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:18:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/670c1ace397a0b631675327a6bdc190215acb884e62790ccbbe1db7f981abe9d"} {"level":"info","ts":"2026-07-28T15:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"670c1ace397a0b631675327a6bdc190215acb884e62790ccbbe1db7f981abe9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"670c1ace397a0b631675327a6bdc190215acb884e62790ccbbe1db7f981abe9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:18:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:18:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["670c1ace397a0b631675327a6bdc190215acb884e62790ccbbe1db7f981abe9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/670c1ace397a0b631675327a6bdc190215acb884e62790ccbbe1db7f981abe9d"} {"level":"info","ts":"2026-07-28T15:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"670c1ace397a0b631675327a6bdc190215acb884e62790ccbbe1db7f981abe9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"670c1ace397a0b631675327a6bdc190215acb884e62790ccbbe1db7f981abe9d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:18:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/670c1ace397a0b631675327a6bdc190215acb884e62790ccbbe1db7f981abe9d"} {"level":"debug","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f193cf17bcae9c9e69eedd4f5539ed19c8aabf27033f6890ac21b08afb4cd469","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:18:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:18:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f193cf17bcae9c9e69eedd4f5539ed19c8aabf27033f6890ac21b08afb4cd469"} {"level":"info","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f193cf17bcae9c9e69eedd4f5539ed19c8aabf27033f6890ac21b08afb4cd469","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f193cf17bcae9c9e69eedd4f5539ed19c8aabf27033f6890ac21b08afb4cd469","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f193cf17bcae9c9e69eedd4f5539ed19c8aabf27033f6890ac21b08afb4cd469"} {"level":"debug","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f193cf17bcae9c9e69eedd4f5539ed19c8aabf27033f6890ac21b08afb4cd469","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:18:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:18:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f193cf17bcae9c9e69eedd4f5539ed19c8aabf27033f6890ac21b08afb4cd469"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f193cf17bcae9c9e69eedd4f5539ed19c8aabf27033f6890ac21b08afb4cd469","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f193cf17bcae9c9e69eedd4f5539ed19c8aabf27033f6890ac21b08afb4cd469","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:18:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:18:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f193cf17bcae9c9e69eedd4f5539ed19c8aabf27033f6890ac21b08afb4cd469"} {"level":"info","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f193cf17bcae9c9e69eedd4f5539ed19c8aabf27033f6890ac21b08afb4cd469","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f193cf17bcae9c9e69eedd4f5539ed19c8aabf27033f6890ac21b08afb4cd469","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f193cf17bcae9c9e69eedd4f5539ed19c8aabf27033f6890ac21b08afb4cd469","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f193cf17bcae9c9e69eedd4f5539ed19c8aabf27033f6890ac21b08afb4cd469"} {"level":"debug","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f193cf17bcae9c9e69eedd4f5539ed19c8aabf27033f6890ac21b08afb4cd469","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:18:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:18:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f193cf17bcae9c9e69eedd4f5539ed19c8aabf27033f6890ac21b08afb4cd469"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f193cf17bcae9c9e69eedd4f5539ed19c8aabf27033f6890ac21b08afb4cd469","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:18:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:18:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891"} {"level":"info","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f193cf17bcae9c9e69eedd4f5539ed19c8aabf27033f6890ac21b08afb4cd469"} {"level":"info","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02"} {"level":"info","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f193cf17bcae9c9e69eedd4f5539ed19c8aabf27033f6890ac21b08afb4cd469","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:18:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:18:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891"} {"level":"info","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"} {"level":"info","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50d708f41882dfe023420957fd3d1bedf54fa717f52a658ec84aa870fa691c8"} {"level":"info","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:18:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:18:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02"} {"level":"info","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:18:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:18:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891"} {"level":"info","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391"} {"level":"info","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50d708f41882dfe023420957fd3d1bedf54fa717f52a658ec84aa870fa691c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:18:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:18:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e50d708f41882dfe023420957fd3d1bedf54fa717f52a658ec84aa870fa691c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"} {"level":"info","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7"} {"level":"info","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50d708f41882dfe023420957fd3d1bedf54fa717f52a658ec84aa870fa691c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:18:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:18:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50d708f41882dfe023420957fd3d1bedf54fa717f52a658ec84aa870fa691c8"} {"level":"info","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:18:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:18:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391"} {"level":"info","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e50d708f41882dfe023420957fd3d1bedf54fa717f52a658ec84aa870fa691c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:18:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:18:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"info","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7"} {"level":"info","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28a61a0e0f24bce3096aff51f430b2589402be49d3476d6c64a032da0a9803e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:18:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:18:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28a61a0e0f24bce3096aff51f430b2589402be49d3476d6c64a032da0a9803e4"} {"level":"info","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"info","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28a61a0e0f24bce3096aff51f430b2589402be49d3476d6c64a032da0a9803e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:18:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:18:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:18:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7297f693d16479245c5178e2b366eaafb9a289afefc45520f0f94f254d9ffaf2"} {"level":"info","ts":"2026-07-28T15:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7297f693d16479245c5178e2b366eaafb9a289afefc45520f0f94f254d9ffaf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:18:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:18:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7297f693d16479245c5178e2b366eaafb9a289afefc45520f0f94f254d9ffaf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28a61a0e0f24bce3096aff51f430b2589402be49d3476d6c64a032da0a9803e4"} {"level":"info","ts":"2026-07-28T15:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7297f693d16479245c5178e2b366eaafb9a289afefc45520f0f94f254d9ffaf2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28a61a0e0f24bce3096aff51f430b2589402be49d3476d6c64a032da0a9803e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:18:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:18:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28a61a0e0f24bce3096aff51f430b2589402be49d3476d6c64a032da0a9803e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fb05f859e9953075f8809c25e0076f0b687020efd5dc99f65d3f3a5bf3327fa"} {"level":"info","ts":"2026-07-28T15:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28a61a0e0f24bce3096aff51f430b2589402be49d3476d6c64a032da0a9803e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fb05f859e9953075f8809c25e0076f0b687020efd5dc99f65d3f3a5bf3327fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:18:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:18:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fb05f859e9953075f8809c25e0076f0b687020efd5dc99f65d3f3a5bf3327fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"info","ts":"2026-07-28T15:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fb05f859e9953075f8809c25e0076f0b687020efd5dc99f65d3f3a5bf3327fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7297f693d16479245c5178e2b366eaafb9a289afefc45520f0f94f254d9ffaf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:18:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:18:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7297f693d16479245c5178e2b366eaafb9a289afefc45520f0f94f254d9ffaf2"} {"level":"info","ts":"2026-07-28T15:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7297f693d16479245c5178e2b366eaafb9a289afefc45520f0f94f254d9ffaf2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28a61a0e0f24bce3096aff51f430b2589402be49d3476d6c64a032da0a9803e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:18:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:18:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28a61a0e0f24bce3096aff51f430b2589402be49d3476d6c64a032da0a9803e4"} {"level":"info","ts":"2026-07-28T15:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fb05f859e9953075f8809c25e0076f0b687020efd5dc99f65d3f3a5bf3327fa"} {"level":"info","ts":"2026-07-28T15:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28a61a0e0f24bce3096aff51f430b2589402be49d3476d6c64a032da0a9803e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fb05f859e9953075f8809c25e0076f0b687020efd5dc99f65d3f3a5bf3327fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7297f693d16479245c5178e2b366eaafb9a289afefc45520f0f94f254d9ffaf2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28a61a0e0f24bce3096aff51f430b2589402be49d3476d6c64a032da0a9803e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:18:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:18:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28a61a0e0f24bce3096aff51f430b2589402be49d3476d6c64a032da0a9803e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7297f693d16479245c5178e2b366eaafb9a289afefc45520f0f94f254d9ffaf2"} {"level":"info","ts":"2026-07-28T15:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28a61a0e0f24bce3096aff51f430b2589402be49d3476d6c64a032da0a9803e4"} {"level":"info","ts":"2026-07-28T15:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28a61a0e0f24bce3096aff51f430b2589402be49d3476d6c64a032da0a9803e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7297f693d16479245c5178e2b366eaafb9a289afefc45520f0f94f254d9ffaf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:18:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:18:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7297f693d16479245c5178e2b366eaafb9a289afefc45520f0f94f254d9ffaf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28a61a0e0f24bce3096aff51f430b2589402be49d3476d6c64a032da0a9803e4"} {"level":"info","ts":"2026-07-28T15:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7297f693d16479245c5178e2b366eaafb9a289afefc45520f0f94f254d9ffaf2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28a61a0e0f24bce3096aff51f430b2589402be49d3476d6c64a032da0a9803e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7297f693d16479245c5178e2b366eaafb9a289afefc45520f0f94f254d9ffaf2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7297f693d16479245c5178e2b366eaafb9a289afefc45520f0f94f254d9ffaf2"} {"level":"info","ts":"2026-07-28T15:18:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25791328-58d9-4633-b55f-c4f9fa6d9477","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37950","PortSpecifier":{"PortValue":37950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"25791328-58d9-4633-b55f-c4f9fa6d9477","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T15:18:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25791328-58d9-4633-b55f-c4f9fa6d9477","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37950","PortSpecifier":{"PortValue":37950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785251907,"nanos":931452498},"http":{"id":"25791328-58d9-4633-b55f-c4f9fa6d9477","method":"POST","headers":{":authority":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:18:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"25791328-58d9-4633-b55f-c4f9fa6d9477","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T15:18:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"25791328-58d9-4633-b55f-c4f9fa6d9477","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"dd71831b-4afb-48e1-a707-c0d301a2240b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a65def0-5b0b-4d55-8532-0cdc88dc1480"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/22bc79c9c7f1"]}} {"level":"debug","ts":"2026-07-28T15:18:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"25791328-58d9-4633-b55f-c4f9fa6d9477","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/22bc79c9c7f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a65def0-5b0b-4d55-8532-0cdc88dc1480"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"dd71831b-4afb-48e1-a707-c0d301a2240b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"00b67e61508b1c4a3a360b213fe1ee4ace1d30b728cc26b8b1687b99fc16d00e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:18:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25791328-58d9-4633-b55f-c4f9fa6d9477","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:18:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25791328-58d9-4633-b55f-c4f9fa6d9477","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:18:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25791328-58d9-4633-b55f-c4f9fa6d9477","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d96a19/auth-test-model-d96a19\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d96a19/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:18:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"25791328-58d9-4633-b55f-c4f9fa6d9477","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T15:18:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25791328-58d9-4633-b55f-c4f9fa6d9477","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T15:18:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25791328-58d9-4633-b55f-c4f9fa6d9477","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T15:18:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25791328-58d9-4633-b55f-c4f9fa6d9477","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T15:18:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25791328-58d9-4633-b55f-c4f9fa6d9477","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T15:18:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5441d57f-7e7f-484c-844c-489e0409192e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39796","PortSpecifier":{"PortValue":39796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5441d57f-7e7f-484c-844c-489e0409192e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3edd55.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T15:18:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5441d57f-7e7f-484c-844c-489e0409192e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39796","PortSpecifier":{"PortValue":39796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785251907,"nanos":970443395},"http":{"id":"5441d57f-7e7f-484c-844c-489e0409192e","method":"POST","headers":{":authority":"e2e-shared-b-3edd55.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:18:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5441d57f-7e7f-484c-844c-489e0409192e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T15:18:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5441d57f-7e7f-484c-844c-489e0409192e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"dd71831b-4afb-48e1-a707-c0d301a2240b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a65def0-5b0b-4d55-8532-0cdc88dc1480"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/22bc79c9c7f1"]}} {"level":"debug","ts":"2026-07-28T15:18:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5441d57f-7e7f-484c-844c-489e0409192e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/22bc79c9c7f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a65def0-5b0b-4d55-8532-0cdc88dc1480"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"dd71831b-4afb-48e1-a707-c0d301a2240b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3edd55.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:18:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5441d57f-7e7f-484c-844c-489e0409192e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:18:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5441d57f-7e7f-484c-844c-489e0409192e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:18:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5441d57f-7e7f-484c-844c-489e0409192e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3edd55/auth-test-model-3edd55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3edd55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:18:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5441d57f-7e7f-484c-844c-489e0409192e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T15:18:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5441d57f-7e7f-484c-844c-489e0409192e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T15:18:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5441d57f-7e7f-484c-844c-489e0409192e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T15:18:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5441d57f-7e7f-484c-844c-489e0409192e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T15:18:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5441d57f-7e7f-484c-844c-489e0409192e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T15:18:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0e96760-da8a-4c64-9954-25e3d61b1b05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37962","PortSpecifier":{"PortValue":37962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f0e96760-da8a-4c64-9954-25e3d61b1b05","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T15:18:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0e96760-da8a-4c64-9954-25e3d61b1b05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37962","PortSpecifier":{"PortValue":37962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785251908,"nanos":15475559},"http":{"id":"f0e96760-da8a-4c64-9954-25e3d61b1b05","method":"POST","headers":{":authority":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:18:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f0e96760-da8a-4c64-9954-25e3d61b1b05","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-13faUCSWuAkTn3PrZ_xTscgkxKJka24s640C3SIAfuP2Kb51NJJxEiCzDqauW"} {"level":"debug","ts":"2026-07-28T15:18:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f0e96760-da8a-4c64-9954-25e3d61b1b05","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d96a19.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-13faUCSWuAkTn3PrZ_xTscgkxKJka24s640C3SIAfuP2Kb51NJJxEiCzDqauW\"}"} {"level":"debug","ts":"2026-07-28T15:18:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f0e96760-da8a-4c64-9954-25e3d61b1b05","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d96a19.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cfb77c36-9bf5-40d8-8217-c8b3104313a7","keyName":"e2e-auth-iso-a-9a921f","subscription":"e2e-auth-iso-cab3e5","tenant":"e2e-shared-a-d96a19","userId":"cfb77c36-9bf5-40d8-8217-c8b3104313a7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-28T15:18:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f0e96760-da8a-4c64-9954-25e3d61b1b05","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:18:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0e96760-da8a-4c64-9954-25e3d61b1b05","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:18:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0e96760-da8a-4c64-9954-25e3d61b1b05","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:18:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0e96760-da8a-4c64-9954-25e3d61b1b05","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d96a19/auth-test-model-d96a19\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d96a19/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:18:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f0e96760-da8a-4c64-9954-25e3d61b1b05","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-28T15:18:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0e96760-da8a-4c64-9954-25e3d61b1b05","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T15:18:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0e96760-da8a-4c64-9954-25e3d61b1b05","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T15:18:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0e96760-da8a-4c64-9954-25e3d61b1b05","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-cab3e5"} {"level":"info","ts":"2026-07-28T15:18:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0e96760-da8a-4c64-9954-25e3d61b1b05","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T15:18:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0e96760-da8a-4c64-9954-25e3d61b1b05","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T15:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891"} {"level":"info","ts":"2026-07-28T15:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66af4725a49ab97221ed747524956cd6b8d4965a56d1d61edb1e10b4e03564dc"} {"level":"info","ts":"2026-07-28T15:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/283b0fdd08813dd77e6a58f9bac22fd8a646446747f271b9361db656adaf27b7"} {"level":"info","ts":"2026-07-28T15:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4a1867baaa65aa770e3a134b5714df45c64cdb0f6cb61cf294efa6f45a6c206"} {"level":"info","ts":"2026-07-28T15:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"info","ts":"2026-07-28T15:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ffe8861e7feaef9a693de983cbe8cb606244003c6defcc06d0c1749dd3719c0"} {"level":"info","ts":"2026-07-28T15:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ff34689436bd5fb66d37dca9292737cc4f1d9786565fa6abffd61e2314a3167"} {"level":"info","ts":"2026-07-28T15:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fb05f859e9953075f8809c25e0076f0b687020efd5dc99f65d3f3a5bf3327fa"} {"level":"info","ts":"2026-07-28T15:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73264df4975e212c1f5e9aed66bd165a6bff9d6bae7bff6476f0b0b5d76a8e06"} {"level":"info","ts":"2026-07-28T15:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02"} {"level":"info","ts":"2026-07-28T15:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7297f693d16479245c5178e2b366eaafb9a289afefc45520f0f94f254d9ffaf2"} {"level":"info","ts":"2026-07-28T15:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/670c1ace397a0b631675327a6bdc190215acb884e62790ccbbe1db7f981abe9d"} {"level":"info","ts":"2026-07-28T15:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00b67e61508b1c4a3a360b213fe1ee4ace1d30b728cc26b8b1687b99fc16d00e"} {"level":"info","ts":"2026-07-28T15:18:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e50d708f41882dfe023420957fd3d1bedf54fa717f52a658ec84aa870fa691c8"} {"level":"info","ts":"2026-07-28T15:18:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3cc91a651241f1e3b3482b969962936342d49204618ac0b7ab5e6668ae5bb4e0"} {"level":"info","ts":"2026-07-28T15:18:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28a61a0e0f24bce3096aff51f430b2589402be49d3476d6c64a032da0a9803e4"} {"level":"info","ts":"2026-07-28T15:18:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0fdc9c1843cebbfd19d758be260299dd167889a324e9a094002eb20866a5391"} {"level":"info","ts":"2026-07-28T15:18:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eddac829be8e2591cc6be8fc4a8d820f948369946128029c4962e2445ef09151"} {"level":"info","ts":"2026-07-28T15:18:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02ec28d48eebd15a8dd8e9533e08d3235697d5a1bd80d38b3594327f5d40a9d4"} {"level":"info","ts":"2026-07-28T15:18:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f193cf17bcae9c9e69eedd4f5539ed19c8aabf27033f6890ac21b08afb4cd469"} {"level":"info","ts":"2026-07-28T15:18:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/512888abd000c126821918e23dfb329a4968660343603ca8f7e8e7d71395ac52"} {"level":"info","ts":"2026-07-28T15:18:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19baaf56c8a029ca6e8c3ef26b433db9b30b7d9085f8c1ae724bd37daf8306aa"} {"level":"info","ts":"2026-07-28T15:18:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"} {"level":"info","ts":"2026-07-28T15:18:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/341b327a00b22525186108e2c8b4d5871ae9b57aa0ebf4e73b763c8a07d8f432"} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5171f3e875caea36ed6d15ae06c4f065f7a5797a5ef34e72c5e69dbb8741dd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5171f3e875caea36ed6d15ae06c4f065f7a5797a5ef34e72c5e69dbb8741dd1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5171f3e875caea36ed6d15ae06c4f065f7a5797a5ef34e72c5e69dbb8741dd1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5171f3e875caea36ed6d15ae06c4f065f7a5797a5ef34e72c5e69dbb8741dd1"} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5171f3e875caea36ed6d15ae06c4f065f7a5797a5ef34e72c5e69dbb8741dd1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5171f3e875caea36ed6d15ae06c4f065f7a5797a5ef34e72c5e69dbb8741dd1"} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5171f3e875caea36ed6d15ae06c4f065f7a5797a5ef34e72c5e69dbb8741dd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5171f3e875caea36ed6d15ae06c4f065f7a5797a5ef34e72c5e69dbb8741dd1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5171f3e875caea36ed6d15ae06c4f065f7a5797a5ef34e72c5e69dbb8741dd1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5171f3e875caea36ed6d15ae06c4f065f7a5797a5ef34e72c5e69dbb8741dd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5171f3e875caea36ed6d15ae06c4f065f7a5797a5ef34e72c5e69dbb8741dd1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5171f3e875caea36ed6d15ae06c4f065f7a5797a5ef34e72c5e69dbb8741dd1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5171f3e875caea36ed6d15ae06c4f065f7a5797a5ef34e72c5e69dbb8741dd1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5171f3e875caea36ed6d15ae06c4f065f7a5797a5ef34e72c5e69dbb8741dd1"} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5171f3e875caea36ed6d15ae06c4f065f7a5797a5ef34e72c5e69dbb8741dd1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5171f3e875caea36ed6d15ae06c4f065f7a5797a5ef34e72c5e69dbb8741dd1"} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00b67e61508b1c4a3a360b213fe1ee4ace1d30b728cc26b8b1687b99fc16d00e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00b67e61508b1c4a3a360b213fe1ee4ace1d30b728cc26b8b1687b99fc16d00e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bbf364de75e30325eee1afd9886015c6fc9a804687fa4d115230e0db6335f18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00b67e61508b1c4a3a360b213fe1ee4ace1d30b728cc26b8b1687b99fc16d00e"} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bbf364de75e30325eee1afd9886015c6fc9a804687fa4d115230e0db6335f18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00b67e61508b1c4a3a360b213fe1ee4ace1d30b728cc26b8b1687b99fc16d00e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00b67e61508b1c4a3a360b213fe1ee4ace1d30b728cc26b8b1687b99fc16d00e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bbf364de75e30325eee1afd9886015c6fc9a804687fa4d115230e0db6335f18"} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00b67e61508b1c4a3a360b213fe1ee4ace1d30b728cc26b8b1687b99fc16d00e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bbf364de75e30325eee1afd9886015c6fc9a804687fa4d115230e0db6335f18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bbf364de75e30325eee1afd9886015c6fc9a804687fa4d115230e0db6335f18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bbf364de75e30325eee1afd9886015c6fc9a804687fa4d115230e0db6335f18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5171f3e875caea36ed6d15ae06c4f065f7a5797a5ef34e72c5e69dbb8741dd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5171f3e875caea36ed6d15ae06c4f065f7a5797a5ef34e72c5e69dbb8741dd1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00b67e61508b1c4a3a360b213fe1ee4ace1d30b728cc26b8b1687b99fc16d00e"} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5171f3e875caea36ed6d15ae06c4f065f7a5797a5ef34e72c5e69dbb8741dd1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00b67e61508b1c4a3a360b213fe1ee4ace1d30b728cc26b8b1687b99fc16d00e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bbf364de75e30325eee1afd9886015c6fc9a804687fa4d115230e0db6335f18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bbf364de75e30325eee1afd9886015c6fc9a804687fa4d115230e0db6335f18"} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bbf364de75e30325eee1afd9886015c6fc9a804687fa4d115230e0db6335f18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5171f3e875caea36ed6d15ae06c4f065f7a5797a5ef34e72c5e69dbb8741dd1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bbf364de75e30325eee1afd9886015c6fc9a804687fa4d115230e0db6335f18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bbf364de75e30325eee1afd9886015c6fc9a804687fa4d115230e0db6335f18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00b67e61508b1c4a3a360b213fe1ee4ace1d30b728cc26b8b1687b99fc16d00e"} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bbf364de75e30325eee1afd9886015c6fc9a804687fa4d115230e0db6335f18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e358d6a45dc0aa5b960f16ac2237faa3608a44f4b0daa96b433c30be19dbe6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e358d6a45dc0aa5b960f16ac2237faa3608a44f4b0daa96b433c30be19dbe6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bbf364de75e30325eee1afd9886015c6fc9a804687fa4d115230e0db6335f18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e358d6a45dc0aa5b960f16ac2237faa3608a44f4b0daa96b433c30be19dbe6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5171f3e875caea36ed6d15ae06c4f065f7a5797a5ef34e72c5e69dbb8741dd1"} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e358d6a45dc0aa5b960f16ac2237faa3608a44f4b0daa96b433c30be19dbe6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bbf364de75e30325eee1afd9886015c6fc9a804687fa4d115230e0db6335f18"} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e358d6a45dc0aa5b960f16ac2237faa3608a44f4b0daa96b433c30be19dbe6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e358d6a45dc0aa5b960f16ac2237faa3608a44f4b0daa96b433c30be19dbe6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e358d6a45dc0aa5b960f16ac2237faa3608a44f4b0daa96b433c30be19dbe6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e358d6a45dc0aa5b960f16ac2237faa3608a44f4b0daa96b433c30be19dbe6e"} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e358d6a45dc0aa5b960f16ac2237faa3608a44f4b0daa96b433c30be19dbe6e"} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10659ec78d102b85c6f00037a36067939b94de614653071d8e0c0d5137dc108d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10659ec78d102b85c6f00037a36067939b94de614653071d8e0c0d5137dc108d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e358d6a45dc0aa5b960f16ac2237faa3608a44f4b0daa96b433c30be19dbe6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e358d6a45dc0aa5b960f16ac2237faa3608a44f4b0daa96b433c30be19dbe6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10659ec78d102b85c6f00037a36067939b94de614653071d8e0c0d5137dc108d"} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e358d6a45dc0aa5b960f16ac2237faa3608a44f4b0daa96b433c30be19dbe6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"341b327a00b22525186108e2c8b4d5871ae9b57aa0ebf4e73b763c8a07d8f432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/341b327a00b22525186108e2c8b4d5871ae9b57aa0ebf4e73b763c8a07d8f432"} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"341b327a00b22525186108e2c8b4d5871ae9b57aa0ebf4e73b763c8a07d8f432","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10659ec78d102b85c6f00037a36067939b94de614653071d8e0c0d5137dc108d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10659ec78d102b85c6f00037a36067939b94de614653071d8e0c0d5137dc108d"} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10659ec78d102b85c6f00037a36067939b94de614653071d8e0c0d5137dc108d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e358d6a45dc0aa5b960f16ac2237faa3608a44f4b0daa96b433c30be19dbe6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e358d6a45dc0aa5b960f16ac2237faa3608a44f4b0daa96b433c30be19dbe6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"341b327a00b22525186108e2c8b4d5871ae9b57aa0ebf4e73b763c8a07d8f432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["341b327a00b22525186108e2c8b4d5871ae9b57aa0ebf4e73b763c8a07d8f432"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e358d6a45dc0aa5b960f16ac2237faa3608a44f4b0daa96b433c30be19dbe6e"} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"341b327a00b22525186108e2c8b4d5871ae9b57aa0ebf4e73b763c8a07d8f432","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10659ec78d102b85c6f00037a36067939b94de614653071d8e0c0d5137dc108d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10659ec78d102b85c6f00037a36067939b94de614653071d8e0c0d5137dc108d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/341b327a00b22525186108e2c8b4d5871ae9b57aa0ebf4e73b763c8a07d8f432"} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10659ec78d102b85c6f00037a36067939b94de614653071d8e0c0d5137dc108d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e358d6a45dc0aa5b960f16ac2237faa3608a44f4b0daa96b433c30be19dbe6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e358d6a45dc0aa5b960f16ac2237faa3608a44f4b0daa96b433c30be19dbe6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10659ec78d102b85c6f00037a36067939b94de614653071d8e0c0d5137dc108d"} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e358d6a45dc0aa5b960f16ac2237faa3608a44f4b0daa96b433c30be19dbe6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"341b327a00b22525186108e2c8b4d5871ae9b57aa0ebf4e73b763c8a07d8f432","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ff34689436bd5fb66d37dca9292737cc4f1d9786565fa6abffd61e2314a3167","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ff34689436bd5fb66d37dca9292737cc4f1d9786565fa6abffd61e2314a3167","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10659ec78d102b85c6f00037a36067939b94de614653071d8e0c0d5137dc108d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e358d6a45dc0aa5b960f16ac2237faa3608a44f4b0daa96b433c30be19dbe6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e358d6a45dc0aa5b960f16ac2237faa3608a44f4b0daa96b433c30be19dbe6e"} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e358d6a45dc0aa5b960f16ac2237faa3608a44f4b0daa96b433c30be19dbe6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ff34689436bd5fb66d37dca9292737cc4f1d9786565fa6abffd61e2314a3167","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ff34689436bd5fb66d37dca9292737cc4f1d9786565fa6abffd61e2314a3167"} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ff34689436bd5fb66d37dca9292737cc4f1d9786565fa6abffd61e2314a3167","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e358d6a45dc0aa5b960f16ac2237faa3608a44f4b0daa96b433c30be19dbe6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e358d6a45dc0aa5b960f16ac2237faa3608a44f4b0daa96b433c30be19dbe6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e358d6a45dc0aa5b960f16ac2237faa3608a44f4b0daa96b433c30be19dbe6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ff34689436bd5fb66d37dca9292737cc4f1d9786565fa6abffd61e2314a3167","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ff34689436bd5fb66d37dca9292737cc4f1d9786565fa6abffd61e2314a3167"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/341b327a00b22525186108e2c8b4d5871ae9b57aa0ebf4e73b763c8a07d8f432"} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ff34689436bd5fb66d37dca9292737cc4f1d9786565fa6abffd61e2314a3167","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e358d6a45dc0aa5b960f16ac2237faa3608a44f4b0daa96b433c30be19dbe6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4398c32a681434c3d6dda94286d62576b955cd36a5f7f3766df48cbe583dab91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4398c32a681434c3d6dda94286d62576b955cd36a5f7f3766df48cbe583dab91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ff34689436bd5fb66d37dca9292737cc4f1d9786565fa6abffd61e2314a3167","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4398c32a681434c3d6dda94286d62576b955cd36a5f7f3766df48cbe583dab91","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10659ec78d102b85c6f00037a36067939b94de614653071d8e0c0d5137dc108d"} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4398c32a681434c3d6dda94286d62576b955cd36a5f7f3766df48cbe583dab91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4398c32a681434c3d6dda94286d62576b955cd36a5f7f3766df48cbe583dab91","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e358d6a45dc0aa5b960f16ac2237faa3608a44f4b0daa96b433c30be19dbe6e"} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ff34689436bd5fb66d37dca9292737cc4f1d9786565fa6abffd61e2314a3167"} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4398c32a681434c3d6dda94286d62576b955cd36a5f7f3766df48cbe583dab91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4398c32a681434c3d6dda94286d62576b955cd36a5f7f3766df48cbe583dab91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4398c32a681434c3d6dda94286d62576b955cd36a5f7f3766df48cbe583dab91","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4398c32a681434c3d6dda94286d62576b955cd36a5f7f3766df48cbe583dab91"} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4398c32a681434c3d6dda94286d62576b955cd36a5f7f3766df48cbe583dab91"} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4398c32a681434c3d6dda94286d62576b955cd36a5f7f3766df48cbe583dab91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4398c32a681434c3d6dda94286d62576b955cd36a5f7f3766df48cbe583dab91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4398c32a681434c3d6dda94286d62576b955cd36a5f7f3766df48cbe583dab91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92fcaa9dbb9f3014f7e4b89ff419f650888bd9b4d57ec1cb812f067353a89b73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92fcaa9dbb9f3014f7e4b89ff419f650888bd9b4d57ec1cb812f067353a89b73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4398c32a681434c3d6dda94286d62576b955cd36a5f7f3766df48cbe583dab91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92fcaa9dbb9f3014f7e4b89ff419f650888bd9b4d57ec1cb812f067353a89b73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92fcaa9dbb9f3014f7e4b89ff419f650888bd9b4d57ec1cb812f067353a89b73","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92fcaa9dbb9f3014f7e4b89ff419f650888bd9b4d57ec1cb812f067353a89b73"} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92fcaa9dbb9f3014f7e4b89ff419f650888bd9b4d57ec1cb812f067353a89b73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92fcaa9dbb9f3014f7e4b89ff419f650888bd9b4d57ec1cb812f067353a89b73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4398c32a681434c3d6dda94286d62576b955cd36a5f7f3766df48cbe583dab91"} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92fcaa9dbb9f3014f7e4b89ff419f650888bd9b4d57ec1cb812f067353a89b73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92fcaa9dbb9f3014f7e4b89ff419f650888bd9b4d57ec1cb812f067353a89b73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92fcaa9dbb9f3014f7e4b89ff419f650888bd9b4d57ec1cb812f067353a89b73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92fcaa9dbb9f3014f7e4b89ff419f650888bd9b4d57ec1cb812f067353a89b73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92fcaa9dbb9f3014f7e4b89ff419f650888bd9b4d57ec1cb812f067353a89b73","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92fcaa9dbb9f3014f7e4b89ff419f650888bd9b4d57ec1cb812f067353a89b73"} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92fcaa9dbb9f3014f7e4b89ff419f650888bd9b4d57ec1cb812f067353a89b73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92fcaa9dbb9f3014f7e4b89ff419f650888bd9b4d57ec1cb812f067353a89b73"} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92fcaa9dbb9f3014f7e4b89ff419f650888bd9b4d57ec1cb812f067353a89b73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92fcaa9dbb9f3014f7e4b89ff419f650888bd9b4d57ec1cb812f067353a89b73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92fcaa9dbb9f3014f7e4b89ff419f650888bd9b4d57ec1cb812f067353a89b73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92fcaa9dbb9f3014f7e4b89ff419f650888bd9b4d57ec1cb812f067353a89b73","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a"} {"level":"debug","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92fcaa9dbb9f3014f7e4b89ff419f650888bd9b4d57ec1cb812f067353a89b73"} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a"} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a"} {"level":"debug","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a"} {"level":"debug","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ffe8861e7feaef9a693de983cbe8cb606244003c6defcc06d0c1749dd3719c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ffe8861e7feaef9a693de983cbe8cb606244003c6defcc06d0c1749dd3719c0"} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ffe8861e7feaef9a693de983cbe8cb606244003c6defcc06d0c1749dd3719c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a"} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ffe8861e7feaef9a693de983cbe8cb606244003c6defcc06d0c1749dd3719c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ffe8861e7feaef9a693de983cbe8cb606244003c6defcc06d0c1749dd3719c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ffe8861e7feaef9a693de983cbe8cb606244003c6defcc06d0c1749dd3719c0"} {"level":"error","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a"} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ffe8861e7feaef9a693de983cbe8cb606244003c6defcc06d0c1749dd3719c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ffe8861e7feaef9a693de983cbe8cb606244003c6defcc06d0c1749dd3719c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ffe8861e7feaef9a693de983cbe8cb606244003c6defcc06d0c1749dd3719c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ffe8861e7feaef9a693de983cbe8cb606244003c6defcc06d0c1749dd3719c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16b429fe320d4714e19b788275187463c43124b3e00348ea6763d61aab4856ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a"} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16b429fe320d4714e19b788275187463c43124b3e00348ea6763d61aab4856ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16b429fe320d4714e19b788275187463c43124b3e00348ea6763d61aab4856ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ffe8861e7feaef9a693de983cbe8cb606244003c6defcc06d0c1749dd3719c0"} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16b429fe320d4714e19b788275187463c43124b3e00348ea6763d61aab4856ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16b429fe320d4714e19b788275187463c43124b3e00348ea6763d61aab4856ef"} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16b429fe320d4714e19b788275187463c43124b3e00348ea6763d61aab4856ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16b429fe320d4714e19b788275187463c43124b3e00348ea6763d61aab4856ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16b429fe320d4714e19b788275187463c43124b3e00348ea6763d61aab4856ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a"} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16b429fe320d4714e19b788275187463c43124b3e00348ea6763d61aab4856ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16b429fe320d4714e19b788275187463c43124b3e00348ea6763d61aab4856ef"} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16b429fe320d4714e19b788275187463c43124b3e00348ea6763d61aab4856ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a"} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16b429fe320d4714e19b788275187463c43124b3e00348ea6763d61aab4856ef"} {"level":"error","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a"} {"level":"error","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a"} {"level":"debug","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a"} {"level":"debug","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891"} {"level":"debug","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891"} {"level":"debug","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891"} {"level":"debug","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891"} {"level":"debug","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891"} {"level":"debug","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891"} {"level":"debug","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891"} {"level":"debug","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891"} {"level":"debug","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891"} {"level":"debug","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b"} {"level":"debug","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b"} {"level":"debug","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b"} {"level":"info","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96"} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b"} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96"} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2388c373fde9c0afd85055c147cf0a7aeff127ad96f1bc27549aa727ff282e83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b"} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2388c373fde9c0afd85055c147cf0a7aeff127ad96f1bc27549aa727ff282e83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2388c373fde9c0afd85055c147cf0a7aeff127ad96f1bc27549aa727ff282e83"} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2388c373fde9c0afd85055c147cf0a7aeff127ad96f1bc27549aa727ff282e83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2388c373fde9c0afd85055c147cf0a7aeff127ad96f1bc27549aa727ff282e83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2388c373fde9c0afd85055c147cf0a7aeff127ad96f1bc27549aa727ff282e83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2388c373fde9c0afd85055c147cf0a7aeff127ad96f1bc27549aa727ff282e83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96"} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b"} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2388c373fde9c0afd85055c147cf0a7aeff127ad96f1bc27549aa727ff282e83"} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7e160850e48aee0475cd5f0cb4708970d707379d0301616bbe913501069d51c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7e160850e48aee0475cd5f0cb4708970d707379d0301616bbe913501069d51c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96"} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7e160850e48aee0475cd5f0cb4708970d707379d0301616bbe913501069d51c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7e160850e48aee0475cd5f0cb4708970d707379d0301616bbe913501069d51c"} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7e160850e48aee0475cd5f0cb4708970d707379d0301616bbe913501069d51c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7e160850e48aee0475cd5f0cb4708970d707379d0301616bbe913501069d51c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7e160850e48aee0475cd5f0cb4708970d707379d0301616bbe913501069d51c"} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7e160850e48aee0475cd5f0cb4708970d707379d0301616bbe913501069d51c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7e160850e48aee0475cd5f0cb4708970d707379d0301616bbe913501069d51c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7e160850e48aee0475cd5f0cb4708970d707379d0301616bbe913501069d51c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7e160850e48aee0475cd5f0cb4708970d707379d0301616bbe913501069d51c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7e160850e48aee0475cd5f0cb4708970d707379d0301616bbe913501069d51c"} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159"} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159"} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159"} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159"} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159"} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159"} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159"} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159"} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159"} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159"} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159"} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159"} {"level":"error","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"} {"level":"error","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"271925dabac41003dddfc712ad1c9939b11346db78f9546d5d0975144c970cd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02"} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"271925dabac41003dddfc712ad1c9939b11346db78f9546d5d0975144c970cd6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/271925dabac41003dddfc712ad1c9939b11346db78f9546d5d0975144c970cd6"} {"level":"info","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"271925dabac41003dddfc712ad1c9939b11346db78f9546d5d0975144c970cd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["271925dabac41003dddfc712ad1c9939b11346db78f9546d5d0975144c970cd6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02"} {"level":"info","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"271925dabac41003dddfc712ad1c9939b11346db78f9546d5d0975144c970cd6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"271925dabac41003dddfc712ad1c9939b11346db78f9546d5d0975144c970cd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/271925dabac41003dddfc712ad1c9939b11346db78f9546d5d0975144c970cd6"} {"level":"info","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"271925dabac41003dddfc712ad1c9939b11346db78f9546d5d0975144c970cd6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"271925dabac41003dddfc712ad1c9939b11346db78f9546d5d0975144c970cd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["271925dabac41003dddfc712ad1c9939b11346db78f9546d5d0975144c970cd6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"271925dabac41003dddfc712ad1c9939b11346db78f9546d5d0975144c970cd6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d70fc89bf0cca293e3477f72894a23c16ee3155f657c91b55b329534a433754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02"} {"level":"info","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d70fc89bf0cca293e3477f72894a23c16ee3155f657c91b55b329534a433754","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"271925dabac41003dddfc712ad1c9939b11346db78f9546d5d0975144c970cd6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"} {"level":"info","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d70fc89bf0cca293e3477f72894a23c16ee3155f657c91b55b329534a433754","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d70fc89bf0cca293e3477f72894a23c16ee3155f657c91b55b329534a433754","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/271925dabac41003dddfc712ad1c9939b11346db78f9546d5d0975144c970cd6"} {"level":"debug","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d70fc89bf0cca293e3477f72894a23c16ee3155f657c91b55b329534a433754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d70fc89bf0cca293e3477f72894a23c16ee3155f657c91b55b329534a433754"} {"level":"info","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d70fc89bf0cca293e3477f72894a23c16ee3155f657c91b55b329534a433754","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d70fc89bf0cca293e3477f72894a23c16ee3155f657c91b55b329534a433754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d70fc89bf0cca293e3477f72894a23c16ee3155f657c91b55b329534a433754"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d70fc89bf0cca293e3477f72894a23c16ee3155f657c91b55b329534a433754","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f"} {"level":"info","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d70fc89bf0cca293e3477f72894a23c16ee3155f657c91b55b329534a433754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d70fc89bf0cca293e3477f72894a23c16ee3155f657c91b55b329534a433754"} {"level":"info","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f"} {"level":"info","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d70fc89bf0cca293e3477f72894a23c16ee3155f657c91b55b329534a433754","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d70fc89bf0cca293e3477f72894a23c16ee3155f657c91b55b329534a433754","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d70fc89bf0cca293e3477f72894a23c16ee3155f657c91b55b329534a433754"} {"level":"debug","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d70fc89bf0cca293e3477f72894a23c16ee3155f657c91b55b329534a433754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d70fc89bf0cca293e3477f72894a23c16ee3155f657c91b55b329534a433754"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d70fc89bf0cca293e3477f72894a23c16ee3155f657c91b55b329534a433754","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d70fc89bf0cca293e3477f72894a23c16ee3155f657c91b55b329534a433754","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f"} {"level":"info","ts":"2026-07-28T15:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d70fc89bf0cca293e3477f72894a23c16ee3155f657c91b55b329534a433754"} {"level":"info","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c78d11c-c298-438e-a90b-ebca2036655a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50238","PortSpecifier":{"PortValue":50238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3c78d11c-c298-438e-a90b-ebca2036655a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c78d11c-c298-438e-a90b-ebca2036655a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50238","PortSpecifier":{"PortValue":50238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785252044,"nanos":216463849},"http":{"id":"3c78d11c-c298-438e-a90b-ebca2036655a","method":"POST","headers":{":authority":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3c78d11c-c298-438e-a90b-ebca2036655a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3c78d11c-c298-438e-a90b-ebca2036655a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"dd71831b-4afb-48e1-a707-c0d301a2240b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a65def0-5b0b-4d55-8532-0cdc88dc1480"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/22bc79c9c7f1"]}} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3c78d11c-c298-438e-a90b-ebca2036655a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/22bc79c9c7f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a65def0-5b0b-4d55-8532-0cdc88dc1480"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"dd71831b-4afb-48e1-a707-c0d301a2240b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"00b67e61508b1c4a3a360b213fe1ee4ace1d30b728cc26b8b1687b99fc16d00e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c78d11c-c298-438e-a90b-ebca2036655a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c78d11c-c298-438e-a90b-ebca2036655a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c78d11c-c298-438e-a90b-ebca2036655a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d96a19/sub-test-model-d96a19\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d96a19/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3c78d11c-c298-438e-a90b-ebca2036655a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c78d11c-c298-438e-a90b-ebca2036655a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c78d11c-c298-438e-a90b-ebca2036655a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c78d11c-c298-438e-a90b-ebca2036655a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c78d11c-c298-438e-a90b-ebca2036655a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef4cdd96-ba6f-41f9-b0c0-248d80b39935","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:56974","PortSpecifier":{"PortValue":56974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef4cdd96-ba6f-41f9-b0c0-248d80b39935","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3edd55.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef4cdd96-ba6f-41f9-b0c0-248d80b39935","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:56974","PortSpecifier":{"PortValue":56974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785252044,"nanos":271814721},"http":{"id":"ef4cdd96-ba6f-41f9-b0c0-248d80b39935","method":"POST","headers":{":authority":"e2e-shared-b-3edd55.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ef4cdd96-ba6f-41f9-b0c0-248d80b39935","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef4cdd96-ba6f-41f9-b0c0-248d80b39935","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"dd71831b-4afb-48e1-a707-c0d301a2240b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a65def0-5b0b-4d55-8532-0cdc88dc1480"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/22bc79c9c7f1"]}} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef4cdd96-ba6f-41f9-b0c0-248d80b39935","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/22bc79c9c7f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a65def0-5b0b-4d55-8532-0cdc88dc1480"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"dd71831b-4afb-48e1-a707-c0d301a2240b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3edd55.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef4cdd96-ba6f-41f9-b0c0-248d80b39935","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef4cdd96-ba6f-41f9-b0c0-248d80b39935","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef4cdd96-ba6f-41f9-b0c0-248d80b39935","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3edd55/sub-test-model-3edd55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3edd55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ef4cdd96-ba6f-41f9-b0c0-248d80b39935","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef4cdd96-ba6f-41f9-b0c0-248d80b39935","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef4cdd96-ba6f-41f9-b0c0-248d80b39935","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef4cdd96-ba6f-41f9-b0c0-248d80b39935","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef4cdd96-ba6f-41f9-b0c0-248d80b39935","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95cef059-b68d-48f3-8063-4d5bace3e6dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50244","PortSpecifier":{"PortValue":50244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"95cef059-b68d-48f3-8063-4d5bace3e6dd","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95cef059-b68d-48f3-8063-4d5bace3e6dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50244","PortSpecifier":{"PortValue":50244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785252044,"nanos":319851462},"http":{"id":"95cef059-b68d-48f3-8063-4d5bace3e6dd","method":"GET","headers":{":authority":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"95cef059-b68d-48f3-8063-4d5bace3e6dd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Y5M4cNDlJwUFYvQX_vloAfeEacLKkJWpZrTu18GaQg0oFfLrhVAy1m2GjACx"} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"95cef059-b68d-48f3-8063-4d5bace3e6dd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d96a19.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Y5M4cNDlJwUFYvQX_vloAfeEacLKkJWpZrTu18GaQg0oFfLrhVAy1m2GjACx\"}"} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"95cef059-b68d-48f3-8063-4d5bace3e6dd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d96a19.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6e6f3e9a-49ce-4455-8ed6-5b39360753a4","keyName":"e2e-sub-iso-3a8b0a","subscription":"e2e-a-only-a14a0b","tenant":"e2e-shared-a-d96a19","userId":"6e6f3e9a-49ce-4455-8ed6-5b39360753a4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"95cef059-b68d-48f3-8063-4d5bace3e6dd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95cef059-b68d-48f3-8063-4d5bace3e6dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95cef059-b68d-48f3-8063-4d5bace3e6dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95cef059-b68d-48f3-8063-4d5bace3e6dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d96a19/sub-test-model-d96a19\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d96a19/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"95cef059-b68d-48f3-8063-4d5bace3e6dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95cef059-b68d-48f3-8063-4d5bace3e6dd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-a14a0b"} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95cef059-b68d-48f3-8063-4d5bace3e6dd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95cef059-b68d-48f3-8063-4d5bace3e6dd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95cef059-b68d-48f3-8063-4d5bace3e6dd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95cef059-b68d-48f3-8063-4d5bace3e6dd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b13ee800-421e-4db6-a5ac-f23d3902f0df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:56988","PortSpecifier":{"PortValue":56988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b13ee800-421e-4db6-a5ac-f23d3902f0df","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-3edd55.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b13ee800-421e-4db6-a5ac-f23d3902f0df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:56988","PortSpecifier":{"PortValue":56988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785252044,"nanos":362505051},"http":{"id":"b13ee800-421e-4db6-a5ac-f23d3902f0df","method":"GET","headers":{":authority":"e2e-shared-b-3edd55.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b13ee800-421e-4db6-a5ac-f23d3902f0df","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AjK8q6eeuPJxJDrm_cFbUhLfh0JBLTOx5WaFXf3qGfWfsFsObP84LMzMW0dj"} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b13ee800-421e-4db6-a5ac-f23d3902f0df","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3edd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AjK8q6eeuPJxJDrm_cFbUhLfh0JBLTOx5WaFXf3qGfWfsFsObP84LMzMW0dj\"}"} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b13ee800-421e-4db6-a5ac-f23d3902f0df","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3edd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8f4381cd-42be-4f03-8ef9-6848be274ddc","keyName":"e2e-sub-iso-242640","subscription":"e2e-b-only-a14a0b","tenant":"e2e-shared-b-3edd55","userId":"8f4381cd-42be-4f03-8ef9-6848be274ddc","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b13ee800-421e-4db6-a5ac-f23d3902f0df","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b13ee800-421e-4db6-a5ac-f23d3902f0df","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b13ee800-421e-4db6-a5ac-f23d3902f0df","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b13ee800-421e-4db6-a5ac-f23d3902f0df","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3edd55/sub-test-model-3edd55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3edd55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b13ee800-421e-4db6-a5ac-f23d3902f0df","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b13ee800-421e-4db6-a5ac-f23d3902f0df","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-a14a0b"} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b13ee800-421e-4db6-a5ac-f23d3902f0df","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b13ee800-421e-4db6-a5ac-f23d3902f0df","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b13ee800-421e-4db6-a5ac-f23d3902f0df","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T15:20:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b13ee800-421e-4db6-a5ac-f23d3902f0df","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T15:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b"} {"level":"info","ts":"2026-07-28T15:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2388c373fde9c0afd85055c147cf0a7aeff127ad96f1bc27549aa727ff282e83"} {"level":"info","ts":"2026-07-28T15:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f"} {"level":"info","ts":"2026-07-28T15:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159"} {"level":"info","ts":"2026-07-28T15:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"info","ts":"2026-07-28T15:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02"} {"level":"info","ts":"2026-07-28T15:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96"} {"level":"info","ts":"2026-07-28T15:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"} {"level":"info","ts":"2026-07-28T15:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891"} {"level":"info","ts":"2026-07-28T15:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/271925dabac41003dddfc712ad1c9939b11346db78f9546d5d0975144c970cd6"} {"level":"info","ts":"2026-07-28T15:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7e160850e48aee0475cd5f0cb4708970d707379d0301616bbe913501069d51c"} {"level":"info","ts":"2026-07-28T15:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d70fc89bf0cca293e3477f72894a23c16ee3155f657c91b55b329534a433754"} {"level":"debug","ts":"2026-07-28T15:20:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96"} {"level":"info","ts":"2026-07-28T15:20:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96"} {"level":"error","ts":"2026-07-28T15:20:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-28T15:20:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96"} {"level":"debug","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96"} {"level":"debug","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"} {"level":"info","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"} {"level":"info","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"} {"level":"debug","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"} {"level":"debug","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"} {"level":"debug","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"} {"level":"debug","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b"} {"level":"info","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b"} {"level":"info","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b"} {"level":"debug","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7e160850e48aee0475cd5f0cb4708970d707379d0301616bbe913501069d51c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7e160850e48aee0475cd5f0cb4708970d707379d0301616bbe913501069d51c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7e160850e48aee0475cd5f0cb4708970d707379d0301616bbe913501069d51c"} {"level":"info","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7e160850e48aee0475cd5f0cb4708970d707379d0301616bbe913501069d51c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7e160850e48aee0475cd5f0cb4708970d707379d0301616bbe913501069d51c"} {"level":"debug","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7e160850e48aee0475cd5f0cb4708970d707379d0301616bbe913501069d51c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:20:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:20:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7e160850e48aee0475cd5f0cb4708970d707379d0301616bbe913501069d51c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7e160850e48aee0475cd5f0cb4708970d707379d0301616bbe913501069d51c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7e160850e48aee0475cd5f0cb4708970d707379d0301616bbe913501069d51c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b"} {"level":"info","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7e160850e48aee0475cd5f0cb4708970d707379d0301616bbe913501069d51c"} {"level":"debug","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891"} {"level":"info","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:20:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:20:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891"} {"level":"error","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:20:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891"} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"271925dabac41003dddfc712ad1c9939b11346db78f9546d5d0975144c970cd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"271925dabac41003dddfc712ad1c9939b11346db78f9546d5d0975144c970cd6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2388c373fde9c0afd85055c147cf0a7aeff127ad96f1bc27549aa727ff282e83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/271925dabac41003dddfc712ad1c9939b11346db78f9546d5d0975144c970cd6"} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2388c373fde9c0afd85055c147cf0a7aeff127ad96f1bc27549aa727ff282e83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"271925dabac41003dddfc712ad1c9939b11346db78f9546d5d0975144c970cd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["271925dabac41003dddfc712ad1c9939b11346db78f9546d5d0975144c970cd6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2388c373fde9c0afd85055c147cf0a7aeff127ad96f1bc27549aa727ff282e83"} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"271925dabac41003dddfc712ad1c9939b11346db78f9546d5d0975144c970cd6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2388c373fde9c0afd85055c147cf0a7aeff127ad96f1bc27549aa727ff282e83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2388c373fde9c0afd85055c147cf0a7aeff127ad96f1bc27549aa727ff282e83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/271925dabac41003dddfc712ad1c9939b11346db78f9546d5d0975144c970cd6"} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2388c373fde9c0afd85055c147cf0a7aeff127ad96f1bc27549aa727ff282e83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"271925dabac41003dddfc712ad1c9939b11346db78f9546d5d0975144c970cd6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2388c373fde9c0afd85055c147cf0a7aeff127ad96f1bc27549aa727ff282e83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2388c373fde9c0afd85055c147cf0a7aeff127ad96f1bc27549aa727ff282e83"} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2388c373fde9c0afd85055c147cf0a7aeff127ad96f1bc27549aa727ff282e83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2388c373fde9c0afd85055c147cf0a7aeff127ad96f1bc27549aa727ff282e83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2388c373fde9c0afd85055c147cf0a7aeff127ad96f1bc27549aa727ff282e83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/271925dabac41003dddfc712ad1c9939b11346db78f9546d5d0975144c970cd6"} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2388c373fde9c0afd85055c147cf0a7aeff127ad96f1bc27549aa727ff282e83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2388c373fde9c0afd85055c147cf0a7aeff127ad96f1bc27549aa727ff282e83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2388c373fde9c0afd85055c147cf0a7aeff127ad96f1bc27549aa727ff282e83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2388c373fde9c0afd85055c147cf0a7aeff127ad96f1bc27549aa727ff282e83","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2388c373fde9c0afd85055c147cf0a7aeff127ad96f1bc27549aa727ff282e83\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2388c373fde9c0afd85055c147cf0a7aeff127ad96f1bc27549aa727ff282e83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2388c373fde9c0afd85055c147cf0a7aeff127ad96f1bc27549aa727ff282e83","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891"} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2388c373fde9c0afd85055c147cf0a7aeff127ad96f1bc27549aa727ff282e83"} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02"} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f"} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02"} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f"} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02"} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f"} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02"} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f"} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02"} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d70fc89bf0cca293e3477f72894a23c16ee3155f657c91b55b329534a433754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d70fc89bf0cca293e3477f72894a23c16ee3155f657c91b55b329534a433754","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f"} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d70fc89bf0cca293e3477f72894a23c16ee3155f657c91b55b329534a433754"} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d70fc89bf0cca293e3477f72894a23c16ee3155f657c91b55b329534a433754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d70fc89bf0cca293e3477f72894a23c16ee3155f657c91b55b329534a433754"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d70fc89bf0cca293e3477f72894a23c16ee3155f657c91b55b329534a433754","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02"} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159"} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d70fc89bf0cca293e3477f72894a23c16ee3155f657c91b55b329534a433754","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f"} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d70fc89bf0cca293e3477f72894a23c16ee3155f657c91b55b329534a433754"} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02"} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159"} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:21:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"debug","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"debug","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:21:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:21:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:21:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:21:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"debug","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"debug","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:21:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:21:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:21:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:21:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"debug","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"debug","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:21:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:21:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:21:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:21:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"debug","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"debug","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:21:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:21:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:21:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:21:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"debug","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"debug","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:21:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:21:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:21:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"info","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91455480-85a8-4e97-972a-00b188a50858","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35438","PortSpecifier":{"PortValue":35438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"91455480-85a8-4e97-972a-00b188a50858","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91455480-85a8-4e97-972a-00b188a50858","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35438","PortSpecifier":{"PortValue":35438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785252082,"nanos":715834699},"http":{"id":"91455480-85a8-4e97-972a-00b188a50858","method":"POST","headers":{":authority":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"91455480-85a8-4e97-972a-00b188a50858","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"91455480-85a8-4e97-972a-00b188a50858","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"dd71831b-4afb-48e1-a707-c0d301a2240b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a65def0-5b0b-4d55-8532-0cdc88dc1480"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/22bc79c9c7f1"]}} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"91455480-85a8-4e97-972a-00b188a50858","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/22bc79c9c7f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a65def0-5b0b-4d55-8532-0cdc88dc1480"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"dd71831b-4afb-48e1-a707-c0d301a2240b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"00b67e61508b1c4a3a360b213fe1ee4ace1d30b728cc26b8b1687b99fc16d00e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91455480-85a8-4e97-972a-00b188a50858","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91455480-85a8-4e97-972a-00b188a50858","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91455480-85a8-4e97-972a-00b188a50858","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d96a19/sub-test-model-d96a19\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d96a19/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"91455480-85a8-4e97-972a-00b188a50858","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91455480-85a8-4e97-972a-00b188a50858","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91455480-85a8-4e97-972a-00b188a50858","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91455480-85a8-4e97-972a-00b188a50858","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91455480-85a8-4e97-972a-00b188a50858","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67a867ed-1b87-41f1-bd35-03b64b1e2bd3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48664","PortSpecifier":{"PortValue":48664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"67a867ed-1b87-41f1-bd35-03b64b1e2bd3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3edd55.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67a867ed-1b87-41f1-bd35-03b64b1e2bd3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48664","PortSpecifier":{"PortValue":48664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785252082,"nanos":755009019},"http":{"id":"67a867ed-1b87-41f1-bd35-03b64b1e2bd3","method":"POST","headers":{":authority":"e2e-shared-b-3edd55.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"67a867ed-1b87-41f1-bd35-03b64b1e2bd3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"67a867ed-1b87-41f1-bd35-03b64b1e2bd3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"dd71831b-4afb-48e1-a707-c0d301a2240b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a65def0-5b0b-4d55-8532-0cdc88dc1480"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/22bc79c9c7f1"]}} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"67a867ed-1b87-41f1-bd35-03b64b1e2bd3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/22bc79c9c7f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a65def0-5b0b-4d55-8532-0cdc88dc1480"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"dd71831b-4afb-48e1-a707-c0d301a2240b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3edd55.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67a867ed-1b87-41f1-bd35-03b64b1e2bd3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67a867ed-1b87-41f1-bd35-03b64b1e2bd3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67a867ed-1b87-41f1-bd35-03b64b1e2bd3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3edd55/sub-test-model-3edd55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3edd55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"67a867ed-1b87-41f1-bd35-03b64b1e2bd3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67a867ed-1b87-41f1-bd35-03b64b1e2bd3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67a867ed-1b87-41f1-bd35-03b64b1e2bd3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67a867ed-1b87-41f1-bd35-03b64b1e2bd3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67a867ed-1b87-41f1-bd35-03b64b1e2bd3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32e5b72c-cd5d-421d-a075-4731b1ffc113","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35440","PortSpecifier":{"PortValue":35440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"32e5b72c-cd5d-421d-a075-4731b1ffc113","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32e5b72c-cd5d-421d-a075-4731b1ffc113","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35440","PortSpecifier":{"PortValue":35440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785252082,"nanos":794456791},"http":{"id":"32e5b72c-cd5d-421d-a075-4731b1ffc113","method":"POST","headers":{":authority":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"32e5b72c-cd5d-421d-a075-4731b1ffc113","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1R3YOzQHE3XEPQIaL_wVIDfTZAIz16VQRMM6VFvBsxcut0njZfQHN4XpLJZdW"} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"32e5b72c-cd5d-421d-a075-4731b1ffc113","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d96a19.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1R3YOzQHE3XEPQIaL_wVIDfTZAIz16VQRMM6VFvBsxcut0njZfQHN4XpLJZdW\"}"} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"32e5b72c-cd5d-421d-a075-4731b1ffc113","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d96a19.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d5611ce8-28ac-40c7-95f3-a7e4dc337082","keyName":"e2e-sub-iso-d95754","subscription":"e2e-shared-sub-71c3c9","tenant":"e2e-shared-a-d96a19","userId":"d5611ce8-28ac-40c7-95f3-a7e4dc337082","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"32e5b72c-cd5d-421d-a075-4731b1ffc113","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32e5b72c-cd5d-421d-a075-4731b1ffc113","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32e5b72c-cd5d-421d-a075-4731b1ffc113","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32e5b72c-cd5d-421d-a075-4731b1ffc113","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d96a19/sub-test-model-d96a19\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d96a19/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32e5b72c-cd5d-421d-a075-4731b1ffc113","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"32e5b72c-cd5d-421d-a075-4731b1ffc113","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32e5b72c-cd5d-421d-a075-4731b1ffc113","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32e5b72c-cd5d-421d-a075-4731b1ffc113","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-71c3c9"} {"level":"info","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32e5b72c-cd5d-421d-a075-4731b1ffc113","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32e5b72c-cd5d-421d-a075-4731b1ffc113","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"321c846a-71ca-4ef4-be0c-3ee71fab3930","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48674","PortSpecifier":{"PortValue":48674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"321c846a-71ca-4ef4-be0c-3ee71fab3930","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-3edd55.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"321c846a-71ca-4ef4-be0c-3ee71fab3930","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48674","PortSpecifier":{"PortValue":48674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785252082,"nanos":825911496},"http":{"id":"321c846a-71ca-4ef4-be0c-3ee71fab3930","method":"POST","headers":{":authority":"e2e-shared-b-3edd55.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"321c846a-71ca-4ef4-be0c-3ee71fab3930","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16j6WCVhuUQB0WliF_kiRXGQj5zChS1FdGldN4RshcWW3AENSKqZ8Tpgzpbss"} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"321c846a-71ca-4ef4-be0c-3ee71fab3930","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3edd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16j6WCVhuUQB0WliF_kiRXGQj5zChS1FdGldN4RshcWW3AENSKqZ8Tpgzpbss\"}"} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"321c846a-71ca-4ef4-be0c-3ee71fab3930","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3edd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"58f78105-4849-4cf2-9e8e-ccbd8587f0a1","keyName":"e2e-sub-iso-fe7515","subscription":"e2e-shared-sub-71c3c9","tenant":"e2e-shared-b-3edd55","userId":"58f78105-4849-4cf2-9e8e-ccbd8587f0a1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"321c846a-71ca-4ef4-be0c-3ee71fab3930","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"321c846a-71ca-4ef4-be0c-3ee71fab3930","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"321c846a-71ca-4ef4-be0c-3ee71fab3930","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"321c846a-71ca-4ef4-be0c-3ee71fab3930","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3edd55/sub-test-model-3edd55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3edd55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"321c846a-71ca-4ef4-be0c-3ee71fab3930","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"321c846a-71ca-4ef4-be0c-3ee71fab3930","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"321c846a-71ca-4ef4-be0c-3ee71fab3930","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-71c3c9"} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"321c846a-71ca-4ef4-be0c-3ee71fab3930","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"321c846a-71ca-4ef4-be0c-3ee71fab3930","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T15:21:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"321c846a-71ca-4ef4-be0c-3ee71fab3930","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T15:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff378c5af57834955d13b335397f5dd99878af8bf02b1dac7c6fa30befd85b96"} {"level":"info","ts":"2026-07-28T15:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"info","ts":"2026-07-28T15:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16b429fe320d4714e19b788275187463c43124b3e00348ea6763d61aab4856ef"} {"level":"info","ts":"2026-07-28T15:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/341b327a00b22525186108e2c8b4d5871ae9b57aa0ebf4e73b763c8a07d8f432"} {"level":"info","ts":"2026-07-28T15:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bbf364de75e30325eee1afd9886015c6fc9a804687fa4d115230e0db6335f18"} {"level":"info","ts":"2026-07-28T15:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"} {"level":"info","ts":"2026-07-28T15:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d70fc89bf0cca293e3477f72894a23c16ee3155f657c91b55b329534a433754"} {"level":"info","ts":"2026-07-28T15:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2388c373fde9c0afd85055c147cf0a7aeff127ad96f1bc27549aa727ff282e83"} {"level":"info","ts":"2026-07-28T15:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02"} {"level":"info","ts":"2026-07-28T15:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ddcb1b198d1d33f0cca68406a4bcaaa797b031d37be8ae4f6a176ac7978b159"} {"level":"info","ts":"2026-07-28T15:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/271925dabac41003dddfc712ad1c9939b11346db78f9546d5d0975144c970cd6"} {"level":"info","ts":"2026-07-28T15:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7e160850e48aee0475cd5f0cb4708970d707379d0301616bbe913501069d51c"} {"level":"info","ts":"2026-07-28T15:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4398c32a681434c3d6dda94286d62576b955cd36a5f7f3766df48cbe583dab91"} {"level":"info","ts":"2026-07-28T15:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92fcaa9dbb9f3014f7e4b89ff419f650888bd9b4d57ec1cb812f067353a89b73"} {"level":"info","ts":"2026-07-28T15:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24fe3999f500b68209ec15f780689dfd0592207589cf267d53bb6893f40d393f"} {"level":"info","ts":"2026-07-28T15:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5171f3e875caea36ed6d15ae06c4f065f7a5797a5ef34e72c5e69dbb8741dd1"} {"level":"info","ts":"2026-07-28T15:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891"} {"level":"info","ts":"2026-07-28T15:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00b67e61508b1c4a3a360b213fe1ee4ace1d30b728cc26b8b1687b99fc16d00e"} {"level":"info","ts":"2026-07-28T15:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e358d6a45dc0aa5b960f16ac2237faa3608a44f4b0daa96b433c30be19dbe6e"} {"level":"info","ts":"2026-07-28T15:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/10659ec78d102b85c6f00037a36067939b94de614653071d8e0c0d5137dc108d"} {"level":"info","ts":"2026-07-28T15:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ff34689436bd5fb66d37dca9292737cc4f1d9786565fa6abffd61e2314a3167"} {"level":"info","ts":"2026-07-28T15:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ffe8861e7feaef9a693de983cbe8cb606244003c6defcc06d0c1749dd3719c0"} {"level":"info","ts":"2026-07-28T15:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd1f87fa9740354dbb2eec12846008d7bc7e40a3200c21c8a0e2c1b52f8e745b"} {"level":"info","ts":"2026-07-28T15:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/691c331628e11f48729361fb709a7c8578b085090a6efb76ee2042e354793b8a"} {"level":"debug","ts":"2026-07-28T15:22:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a36332e0007ef0a3de2991ed04f6888248bdf8a30479c8126e030b296907af10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:22:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:22:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a36332e0007ef0a3de2991ed04f6888248bdf8a30479c8126e030b296907af10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a36332e0007ef0a3de2991ed04f6888248bdf8a30479c8126e030b296907af10","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:22:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a36332e0007ef0a3de2991ed04f6888248bdf8a30479c8126e030b296907af10"} {"level":"debug","ts":"2026-07-28T15:22:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a36332e0007ef0a3de2991ed04f6888248bdf8a30479c8126e030b296907af10","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:22:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a36332e0007ef0a3de2991ed04f6888248bdf8a30479c8126e030b296907af10"} {"level":"debug","ts":"2026-07-28T15:22:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a36332e0007ef0a3de2991ed04f6888248bdf8a30479c8126e030b296907af10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:22:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:22:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a36332e0007ef0a3de2991ed04f6888248bdf8a30479c8126e030b296907af10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a36332e0007ef0a3de2991ed04f6888248bdf8a30479c8126e030b296907af10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a36332e0007ef0a3de2991ed04f6888248bdf8a30479c8126e030b296907af10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:22:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:22:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a36332e0007ef0a3de2991ed04f6888248bdf8a30479c8126e030b296907af10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a36332e0007ef0a3de2991ed04f6888248bdf8a30479c8126e030b296907af10","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:22:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a36332e0007ef0a3de2991ed04f6888248bdf8a30479c8126e030b296907af10"} {"level":"debug","ts":"2026-07-28T15:22:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a36332e0007ef0a3de2991ed04f6888248bdf8a30479c8126e030b296907af10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a36332e0007ef0a3de2991ed04f6888248bdf8a30479c8126e030b296907af10","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:22:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a36332e0007ef0a3de2991ed04f6888248bdf8a30479c8126e030b296907af10"} {"level":"debug","ts":"2026-07-28T15:22:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a36332e0007ef0a3de2991ed04f6888248bdf8a30479c8126e030b296907af10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:22:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:22:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a36332e0007ef0a3de2991ed04f6888248bdf8a30479c8126e030b296907af10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a36332e0007ef0a3de2991ed04f6888248bdf8a30479c8126e030b296907af10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a36332e0007ef0a3de2991ed04f6888248bdf8a30479c8126e030b296907af10","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:22:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a36332e0007ef0a3de2991ed04f6888248bdf8a30479c8126e030b296907af10"} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ff34689436bd5fb66d37dca9292737cc4f1d9786565fa6abffd61e2314a3167","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ff34689436bd5fb66d37dca9292737cc4f1d9786565fa6abffd61e2314a3167","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ff34689436bd5fb66d37dca9292737cc4f1d9786565fa6abffd61e2314a3167","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ff34689436bd5fb66d37dca9292737cc4f1d9786565fa6abffd61e2314a3167"} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ff34689436bd5fb66d37dca9292737cc4f1d9786565fa6abffd61e2314a3167","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ff34689436bd5fb66d37dca9292737cc4f1d9786565fa6abffd61e2314a3167"} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ff34689436bd5fb66d37dca9292737cc4f1d9786565fa6abffd61e2314a3167","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ff34689436bd5fb66d37dca9292737cc4f1d9786565fa6abffd61e2314a3167"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ff34689436bd5fb66d37dca9292737cc4f1d9786565fa6abffd61e2314a3167","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ff34689436bd5fb66d37dca9292737cc4f1d9786565fa6abffd61e2314a3167","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ff34689436bd5fb66d37dca9292737cc4f1d9786565fa6abffd61e2314a3167"} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b07a9f3abc6bb60e543ee1a98031aad4a3e86aab2e86a3b7b5cafa0b9d8adeb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b07a9f3abc6bb60e543ee1a98031aad4a3e86aab2e86a3b7b5cafa0b9d8adeb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b07a9f3abc6bb60e543ee1a98031aad4a3e86aab2e86a3b7b5cafa0b9d8adeb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b07a9f3abc6bb60e543ee1a98031aad4a3e86aab2e86a3b7b5cafa0b9d8adeb2"} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b07a9f3abc6bb60e543ee1a98031aad4a3e86aab2e86a3b7b5cafa0b9d8adeb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b07a9f3abc6bb60e543ee1a98031aad4a3e86aab2e86a3b7b5cafa0b9d8adeb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b07a9f3abc6bb60e543ee1a98031aad4a3e86aab2e86a3b7b5cafa0b9d8adeb2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b07a9f3abc6bb60e543ee1a98031aad4a3e86aab2e86a3b7b5cafa0b9d8adeb2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b07a9f3abc6bb60e543ee1a98031aad4a3e86aab2e86a3b7b5cafa0b9d8adeb2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b07a9f3abc6bb60e543ee1a98031aad4a3e86aab2e86a3b7b5cafa0b9d8adeb2"} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b07a9f3abc6bb60e543ee1a98031aad4a3e86aab2e86a3b7b5cafa0b9d8adeb2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b07a9f3abc6bb60e543ee1a98031aad4a3e86aab2e86a3b7b5cafa0b9d8adeb2"} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"039f22614e424bc8cac79a63a2a1282dce6519e6787a0c80ff558e9faef71307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891"} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"039f22614e424bc8cac79a63a2a1282dce6519e6787a0c80ff558e9faef71307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/039f22614e424bc8cac79a63a2a1282dce6519e6787a0c80ff558e9faef71307"} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b07a9f3abc6bb60e543ee1a98031aad4a3e86aab2e86a3b7b5cafa0b9d8adeb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b07a9f3abc6bb60e543ee1a98031aad4a3e86aab2e86a3b7b5cafa0b9d8adeb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891"} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b07a9f3abc6bb60e543ee1a98031aad4a3e86aab2e86a3b7b5cafa0b9d8adeb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"039f22614e424bc8cac79a63a2a1282dce6519e6787a0c80ff558e9faef71307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"039f22614e424bc8cac79a63a2a1282dce6519e6787a0c80ff558e9faef71307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b07a9f3abc6bb60e543ee1a98031aad4a3e86aab2e86a3b7b5cafa0b9d8adeb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"039f22614e424bc8cac79a63a2a1282dce6519e6787a0c80ff558e9faef71307","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/039f22614e424bc8cac79a63a2a1282dce6519e6787a0c80ff558e9faef71307"} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"039f22614e424bc8cac79a63a2a1282dce6519e6787a0c80ff558e9faef71307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["039f22614e424bc8cac79a63a2a1282dce6519e6787a0c80ff558e9faef71307"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891"} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"039f22614e424bc8cac79a63a2a1282dce6519e6787a0c80ff558e9faef71307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"039f22614e424bc8cac79a63a2a1282dce6519e6787a0c80ff558e9faef71307","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b07a9f3abc6bb60e543ee1a98031aad4a3e86aab2e86a3b7b5cafa0b9d8adeb2"} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/039f22614e424bc8cac79a63a2a1282dce6519e6787a0c80ff558e9faef71307"} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4d2f0def5ddda0bf47473168c38605c9424f456b8a049ef3fee3c9ed94caa29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02"} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4d2f0def5ddda0bf47473168c38605c9424f456b8a049ef3fee3c9ed94caa29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4d2f0def5ddda0bf47473168c38605c9424f456b8a049ef3fee3c9ed94caa29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4d2f0def5ddda0bf47473168c38605c9424f456b8a049ef3fee3c9ed94caa29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4d2f0def5ddda0bf47473168c38605c9424f456b8a049ef3fee3c9ed94caa29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4d2f0def5ddda0bf47473168c38605c9424f456b8a049ef3fee3c9ed94caa29"} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4d2f0def5ddda0bf47473168c38605c9424f456b8a049ef3fee3c9ed94caa29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4d2f0def5ddda0bf47473168c38605c9424f456b8a049ef3fee3c9ed94caa29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4d2f0def5ddda0bf47473168c38605c9424f456b8a049ef3fee3c9ed94caa29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4d2f0def5ddda0bf47473168c38605c9424f456b8a049ef3fee3c9ed94caa29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02"} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4d2f0def5ddda0bf47473168c38605c9424f456b8a049ef3fee3c9ed94caa29"} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"387e035e760eba6623a74135535a26677c0c656ac0f03d5df24f86c3647deede","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"387e035e760eba6623a74135535a26677c0c656ac0f03d5df24f86c3647deede","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"387e035e760eba6623a74135535a26677c0c656ac0f03d5df24f86c3647deede","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"387e035e760eba6623a74135535a26677c0c656ac0f03d5df24f86c3647deede","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/387e035e760eba6623a74135535a26677c0c656ac0f03d5df24f86c3647deede"} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"387e035e760eba6623a74135535a26677c0c656ac0f03d5df24f86c3647deede","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/387e035e760eba6623a74135535a26677c0c656ac0f03d5df24f86c3647deede"} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"387e035e760eba6623a74135535a26677c0c656ac0f03d5df24f86c3647deede","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["387e035e760eba6623a74135535a26677c0c656ac0f03d5df24f86c3647deede"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"387e035e760eba6623a74135535a26677c0c656ac0f03d5df24f86c3647deede","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"387e035e760eba6623a74135535a26677c0c656ac0f03d5df24f86c3647deede","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"387e035e760eba6623a74135535a26677c0c656ac0f03d5df24f86c3647deede","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ab4cea6fd0cdb355c254f1b3c30a0abd23f5f951b9a91c25eb659d838ea66eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/387e035e760eba6623a74135535a26677c0c656ac0f03d5df24f86c3647deede"} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ab4cea6fd0cdb355c254f1b3c30a0abd23f5f951b9a91c25eb659d838ea66eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"387e035e760eba6623a74135535a26677c0c656ac0f03d5df24f86c3647deede","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["387e035e760eba6623a74135535a26677c0c656ac0f03d5df24f86c3647deede"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ab4cea6fd0cdb355c254f1b3c30a0abd23f5f951b9a91c25eb659d838ea66eb"} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"387e035e760eba6623a74135535a26677c0c656ac0f03d5df24f86c3647deede","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ffe8861e7feaef9a693de983cbe8cb606244003c6defcc06d0c1749dd3719c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ffe8861e7feaef9a693de983cbe8cb606244003c6defcc06d0c1749dd3719c0"} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ffe8861e7feaef9a693de983cbe8cb606244003c6defcc06d0c1749dd3719c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ab4cea6fd0cdb355c254f1b3c30a0abd23f5f951b9a91c25eb659d838ea66eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ab4cea6fd0cdb355c254f1b3c30a0abd23f5f951b9a91c25eb659d838ea66eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/387e035e760eba6623a74135535a26677c0c656ac0f03d5df24f86c3647deede"} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ab4cea6fd0cdb355c254f1b3c30a0abd23f5f951b9a91c25eb659d838ea66eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14ea452faeba47486034dd0808f2dafc55aaa3363fc580d207b2317638238b38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14ea452faeba47486034dd0808f2dafc55aaa3363fc580d207b2317638238b38"} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14ea452faeba47486034dd0808f2dafc55aaa3363fc580d207b2317638238b38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b98a155b4497eb9bae4f5c1e10202154f08326e448ce1ef5295ce73c7413305e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ab4cea6fd0cdb355c254f1b3c30a0abd23f5f951b9a91c25eb659d838ea66eb"} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b98a155b4497eb9bae4f5c1e10202154f08326e448ce1ef5295ce73c7413305e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"387e035e760eba6623a74135535a26677c0c656ac0f03d5df24f86c3647deede","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ffe8861e7feaef9a693de983cbe8cb606244003c6defcc06d0c1749dd3719c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ffe8861e7feaef9a693de983cbe8cb606244003c6defcc06d0c1749dd3719c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b98a155b4497eb9bae4f5c1e10202154f08326e448ce1ef5295ce73c7413305e"} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ffe8861e7feaef9a693de983cbe8cb606244003c6defcc06d0c1749dd3719c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ab4cea6fd0cdb355c254f1b3c30a0abd23f5f951b9a91c25eb659d838ea66eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00b67e61508b1c4a3a360b213fe1ee4ace1d30b728cc26b8b1687b99fc16d00e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ffe8861e7feaef9a693de983cbe8cb606244003c6defcc06d0c1749dd3719c0"} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00b67e61508b1c4a3a360b213fe1ee4ace1d30b728cc26b8b1687b99fc16d00e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14ea452faeba47486034dd0808f2dafc55aaa3363fc580d207b2317638238b38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14ea452faeba47486034dd0808f2dafc55aaa3363fc580d207b2317638238b38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00b67e61508b1c4a3a360b213fe1ee4ace1d30b728cc26b8b1687b99fc16d00e"} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14ea452faeba47486034dd0808f2dafc55aaa3363fc580d207b2317638238b38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d159307c4542138390db1b6c754dd8b628b5daf08cc10a964635058de1a60d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14ea452faeba47486034dd0808f2dafc55aaa3363fc580d207b2317638238b38"} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d159307c4542138390db1b6c754dd8b628b5daf08cc10a964635058de1a60d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b98a155b4497eb9bae4f5c1e10202154f08326e448ce1ef5295ce73c7413305e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b98a155b4497eb9bae4f5c1e10202154f08326e448ce1ef5295ce73c7413305e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d159307c4542138390db1b6c754dd8b628b5daf08cc10a964635058de1a60d6"} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b98a155b4497eb9bae4f5c1e10202154f08326e448ce1ef5295ce73c7413305e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ffe8861e7feaef9a693de983cbe8cb606244003c6defcc06d0c1749dd3719c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea52a0398641a0fc69a6dec07cdd6df3bf05579b0bea8f4f2866ea9f43dabff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:22:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b98a155b4497eb9bae4f5c1e10202154f08326e448ce1ef5295ce73c7413305e"} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea52a0398641a0fc69a6dec07cdd6df3bf05579b0bea8f4f2866ea9f43dabff8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00b67e61508b1c4a3a360b213fe1ee4ace1d30b728cc26b8b1687b99fc16d00e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00b67e61508b1c4a3a360b213fe1ee4ace1d30b728cc26b8b1687b99fc16d00e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00b67e61508b1c4a3a360b213fe1ee4ace1d30b728cc26b8b1687b99fc16d00e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14ea452faeba47486034dd0808f2dafc55aaa3363fc580d207b2317638238b38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a867f73820eb1811c3693d744b46b34d9d4b297eadf4a8d13ef2e7c5a309d1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea52a0398641a0fc69a6dec07cdd6df3bf05579b0bea8f4f2866ea9f43dabff8"} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a867f73820eb1811c3693d744b46b34d9d4b297eadf4a8d13ef2e7c5a309d1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d159307c4542138390db1b6c754dd8b628b5daf08cc10a964635058de1a60d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d159307c4542138390db1b6c754dd8b628b5daf08cc10a964635058de1a60d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ffe8861e7feaef9a693de983cbe8cb606244003c6defcc06d0c1749dd3719c0"} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d159307c4542138390db1b6c754dd8b628b5daf08cc10a964635058de1a60d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"328d6c1e472f905820e11a6a7acb51ede2d53365846ebca42092d94abfc16584","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00b67e61508b1c4a3a360b213fe1ee4ace1d30b728cc26b8b1687b99fc16d00e"} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"328d6c1e472f905820e11a6a7acb51ede2d53365846ebca42092d94abfc16584","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b98a155b4497eb9bae4f5c1e10202154f08326e448ce1ef5295ce73c7413305e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a867f73820eb1811c3693d744b46b34d9d4b297eadf4a8d13ef2e7c5a309d1c"} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea52a0398641a0fc69a6dec07cdd6df3bf05579b0bea8f4f2866ea9f43dabff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea52a0398641a0fc69a6dec07cdd6df3bf05579b0bea8f4f2866ea9f43dabff8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14ea452faeba47486034dd0808f2dafc55aaa3363fc580d207b2317638238b38"} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea52a0398641a0fc69a6dec07cdd6df3bf05579b0bea8f4f2866ea9f43dabff8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00b67e61508b1c4a3a360b213fe1ee4ace1d30b728cc26b8b1687b99fc16d00e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/328d6c1e472f905820e11a6a7acb51ede2d53365846ebca42092d94abfc16584"} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a867f73820eb1811c3693d744b46b34d9d4b297eadf4a8d13ef2e7c5a309d1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a867f73820eb1811c3693d744b46b34d9d4b297eadf4a8d13ef2e7c5a309d1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d159307c4542138390db1b6c754dd8b628b5daf08cc10a964635058de1a60d6"} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a867f73820eb1811c3693d744b46b34d9d4b297eadf4a8d13ef2e7c5a309d1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac1662982a03563c3238ac86899d8058c3484e6dd3a3c34c1bafcb35041800d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b98a155b4497eb9bae4f5c1e10202154f08326e448ce1ef5295ce73c7413305e"} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac1662982a03563c3238ac86899d8058c3484e6dd3a3c34c1bafcb35041800d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d159307c4542138390db1b6c754dd8b628b5daf08cc10a964635058de1a60d6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"341b327a00b22525186108e2c8b4d5871ae9b57aa0ebf4e73b763c8a07d8f432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac1662982a03563c3238ac86899d8058c3484e6dd3a3c34c1bafcb35041800d7"} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"341b327a00b22525186108e2c8b4d5871ae9b57aa0ebf4e73b763c8a07d8f432","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"328d6c1e472f905820e11a6a7acb51ede2d53365846ebca42092d94abfc16584","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["328d6c1e472f905820e11a6a7acb51ede2d53365846ebca42092d94abfc16584"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/341b327a00b22525186108e2c8b4d5871ae9b57aa0ebf4e73b763c8a07d8f432"} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"328d6c1e472f905820e11a6a7acb51ede2d53365846ebca42092d94abfc16584","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea52a0398641a0fc69a6dec07cdd6df3bf05579b0bea8f4f2866ea9f43dabff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea52a0398641a0fc69a6dec07cdd6df3bf05579b0bea8f4f2866ea9f43dabff8"} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75b55fd163a8a29724d6cac57663da876660091dcd9673a38ce4b9dda0b77944"} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea52a0398641a0fc69a6dec07cdd6df3bf05579b0bea8f4f2866ea9f43dabff8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75b55fd163a8a29724d6cac57663da876660091dcd9673a38ce4b9dda0b77944","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75b55fd163a8a29724d6cac57663da876660091dcd9673a38ce4b9dda0b77944"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db405868d91580167ca7f6f40073dbc709506de659ed3b375a39d2e5d94455c4"} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75b55fd163a8a29724d6cac57663da876660091dcd9673a38ce4b9dda0b77944","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a867f73820eb1811c3693d744b46b34d9d4b297eadf4a8d13ef2e7c5a309d1c"} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db405868d91580167ca7f6f40073dbc709506de659ed3b375a39d2e5d94455c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db405868d91580167ca7f6f40073dbc709506de659ed3b375a39d2e5d94455c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49dae68d4f3d6db7aa219c3f2a89bdec94d9fed7bca7f8de1dcae33e02cf3200"} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db405868d91580167ca7f6f40073dbc709506de659ed3b375a39d2e5d94455c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a867f73820eb1811c3693d744b46b34d9d4b297eadf4a8d13ef2e7c5a309d1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49dae68d4f3d6db7aa219c3f2a89bdec94d9fed7bca7f8de1dcae33e02cf3200","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49dae68d4f3d6db7aa219c3f2a89bdec94d9fed7bca7f8de1dcae33e02cf3200"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49dae68d4f3d6db7aa219c3f2a89bdec94d9fed7bca7f8de1dcae33e02cf3200","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac1662982a03563c3238ac86899d8058c3484e6dd3a3c34c1bafcb35041800d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac1662982a03563c3238ac86899d8058c3484e6dd3a3c34c1bafcb35041800d7"} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac1662982a03563c3238ac86899d8058c3484e6dd3a3c34c1bafcb35041800d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"341b327a00b22525186108e2c8b4d5871ae9b57aa0ebf4e73b763c8a07d8f432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/341b327a00b22525186108e2c8b4d5871ae9b57aa0ebf4e73b763c8a07d8f432"} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"341b327a00b22525186108e2c8b4d5871ae9b57aa0ebf4e73b763c8a07d8f432","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"328d6c1e472f905820e11a6a7acb51ede2d53365846ebca42092d94abfc16584","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"328d6c1e472f905820e11a6a7acb51ede2d53365846ebca42092d94abfc16584","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/328d6c1e472f905820e11a6a7acb51ede2d53365846ebca42092d94abfc16584"} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea52a0398641a0fc69a6dec07cdd6df3bf05579b0bea8f4f2866ea9f43dabff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea52a0398641a0fc69a6dec07cdd6df3bf05579b0bea8f4f2866ea9f43dabff8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea52a0398641a0fc69a6dec07cdd6df3bf05579b0bea8f4f2866ea9f43dabff8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75b55fd163a8a29724d6cac57663da876660091dcd9673a38ce4b9dda0b77944","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db405868d91580167ca7f6f40073dbc709506de659ed3b375a39d2e5d94455c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49dae68d4f3d6db7aa219c3f2a89bdec94d9fed7bca7f8de1dcae33e02cf3200","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac1662982a03563c3238ac86899d8058c3484e6dd3a3c34c1bafcb35041800d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac1662982a03563c3238ac86899d8058c3484e6dd3a3c34c1bafcb35041800d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea52a0398641a0fc69a6dec07cdd6df3bf05579b0bea8f4f2866ea9f43dabff8"} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac1662982a03563c3238ac86899d8058c3484e6dd3a3c34c1bafcb35041800d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"341b327a00b22525186108e2c8b4d5871ae9b57aa0ebf4e73b763c8a07d8f432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["341b327a00b22525186108e2c8b4d5871ae9b57aa0ebf4e73b763c8a07d8f432"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75b55fd163a8a29724d6cac57663da876660091dcd9673a38ce4b9dda0b77944"} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"341b327a00b22525186108e2c8b4d5871ae9b57aa0ebf4e73b763c8a07d8f432","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"328d6c1e472f905820e11a6a7acb51ede2d53365846ebca42092d94abfc16584","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["328d6c1e472f905820e11a6a7acb51ede2d53365846ebca42092d94abfc16584"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"328d6c1e472f905820e11a6a7acb51ede2d53365846ebca42092d94abfc16584","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea52a0398641a0fc69a6dec07cdd6df3bf05579b0bea8f4f2866ea9f43dabff8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac1662982a03563c3238ac86899d8058c3484e6dd3a3c34c1bafcb35041800d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"341b327a00b22525186108e2c8b4d5871ae9b57aa0ebf4e73b763c8a07d8f432","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"328d6c1e472f905820e11a6a7acb51ede2d53365846ebca42092d94abfc16584","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db405868d91580167ca7f6f40073dbc709506de659ed3b375a39d2e5d94455c4"} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49dae68d4f3d6db7aa219c3f2a89bdec94d9fed7bca7f8de1dcae33e02cf3200"} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac1662982a03563c3238ac86899d8058c3484e6dd3a3c34c1bafcb35041800d7"} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/341b327a00b22525186108e2c8b4d5871ae9b57aa0ebf4e73b763c8a07d8f432"} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/328d6c1e472f905820e11a6a7acb51ede2d53365846ebca42092d94abfc16584"} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"} {"level":"info","ts":"2026-07-28T15:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea52a0398641a0fc69a6dec07cdd6df3bf05579b0bea8f4f2866ea9f43dabff8"} {"level":"info","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a03e842-b324-49d1-b9b6-b58039e79642","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60206","PortSpecifier":{"PortValue":60206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0a03e842-b324-49d1-b9b6-b58039e79642","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a03e842-b324-49d1-b9b6-b58039e79642","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60206","PortSpecifier":{"PortValue":60206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785252152,"nanos":171735078},"http":{"id":"0a03e842-b324-49d1-b9b6-b58039e79642","method":"POST","headers":{":authority":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0a03e842-b324-49d1-b9b6-b58039e79642","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0a03e842-b324-49d1-b9b6-b58039e79642","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"dd71831b-4afb-48e1-a707-c0d301a2240b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a65def0-5b0b-4d55-8532-0cdc88dc1480"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/22bc79c9c7f1"]}} {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0a03e842-b324-49d1-b9b6-b58039e79642","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/22bc79c9c7f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a65def0-5b0b-4d55-8532-0cdc88dc1480"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"dd71831b-4afb-48e1-a707-c0d301a2240b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"00b67e61508b1c4a3a360b213fe1ee4ace1d30b728cc26b8b1687b99fc16d00e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a03e842-b324-49d1-b9b6-b58039e79642","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a03e842-b324-49d1-b9b6-b58039e79642","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a03e842-b324-49d1-b9b6-b58039e79642","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d96a19/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0a03e842-b324-49d1-b9b6-b58039e79642","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a03e842-b324-49d1-b9b6-b58039e79642","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a03e842-b324-49d1-b9b6-b58039e79642","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a03e842-b324-49d1-b9b6-b58039e79642","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a03e842-b324-49d1-b9b6-b58039e79642","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47767ca8-930e-446b-8058-f8f48409c6ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51752","PortSpecifier":{"PortValue":51752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"47767ca8-930e-446b-8058-f8f48409c6ab","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3edd55.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47767ca8-930e-446b-8058-f8f48409c6ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51752","PortSpecifier":{"PortValue":51752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785252152,"nanos":213947429},"http":{"id":"47767ca8-930e-446b-8058-f8f48409c6ab","method":"POST","headers":{":authority":"e2e-shared-b-3edd55.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"47767ca8-930e-446b-8058-f8f48409c6ab","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"47767ca8-930e-446b-8058-f8f48409c6ab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"dd71831b-4afb-48e1-a707-c0d301a2240b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a65def0-5b0b-4d55-8532-0cdc88dc1480"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/22bc79c9c7f1"]}} {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"47767ca8-930e-446b-8058-f8f48409c6ab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/22bc79c9c7f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a65def0-5b0b-4d55-8532-0cdc88dc1480"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"dd71831b-4afb-48e1-a707-c0d301a2240b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3edd55.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47767ca8-930e-446b-8058-f8f48409c6ab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47767ca8-930e-446b-8058-f8f48409c6ab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47767ca8-930e-446b-8058-f8f48409c6ab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3edd55/rate-test-model-3edd55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3edd55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"47767ca8-930e-446b-8058-f8f48409c6ab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47767ca8-930e-446b-8058-f8f48409c6ab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47767ca8-930e-446b-8058-f8f48409c6ab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47767ca8-930e-446b-8058-f8f48409c6ab","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47767ca8-930e-446b-8058-f8f48409c6ab","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4feb9b0e-f8d0-406d-b2a2-c30253212905","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60222","PortSpecifier":{"PortValue":60222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4feb9b0e-f8d0-406d-b2a2-c30253212905","method":"POST","path":"/ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19/v1/completions","host":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4feb9b0e-f8d0-406d-b2a2-c30253212905","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60222","PortSpecifier":{"PortValue":60222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785252152,"nanos":253320034},"http":{"id":"4feb9b0e-f8d0-406d-b2a2-c30253212905","method":"POST","headers":{":authority":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4feb9b0e-f8d0-406d-b2a2-c30253212905","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BG7YpI6JhbeoE7dP_odyhXMORCFyq1aU79ikCBrpx0kEUBHwFmGXIvVfomL4"} {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4feb9b0e-f8d0-406d-b2a2-c30253212905","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d96a19.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BG7YpI6JhbeoE7dP_odyhXMORCFyq1aU79ikCBrpx0kEUBHwFmGXIvVfomL4\"}"} {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4feb9b0e-f8d0-406d-b2a2-c30253212905","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d96a19.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"daab93c7-31fc-48d6-9991-f6364ddbfce8","keyName":"e2e-rate-a-3b12c8","subscription":"e2e-rate-iso-a-3b12c8","tenant":"e2e-shared-a-d96a19","userId":"daab93c7-31fc-48d6-9991-f6364ddbfce8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4feb9b0e-f8d0-406d-b2a2-c30253212905","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d96a19.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19\",\"requestedSubscription\":\"e2e-rate-iso-a-3b12c8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4feb9b0e-f8d0-406d-b2a2-c30253212905","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d96a19.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-d96a19/models/facebook/opt-125m","name":"rate-test-model-d96a19","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3b12c8","namespace":"ai-tenant-e2e-shared-a-d96a19","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19"}} {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4feb9b0e-f8d0-406d-b2a2-c30253212905","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4feb9b0e-f8d0-406d-b2a2-c30253212905","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4feb9b0e-f8d0-406d-b2a2-c30253212905","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4feb9b0e-f8d0-406d-b2a2-c30253212905","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d96a19/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4feb9b0e-f8d0-406d-b2a2-c30253212905","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4feb9b0e-f8d0-406d-b2a2-c30253212905","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3b12c8"} {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4feb9b0e-f8d0-406d-b2a2-c30253212905","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4feb9b0e-f8d0-406d-b2a2-c30253212905","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4feb9b0e-f8d0-406d-b2a2-c30253212905","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"daab93c7-31fc-48d6-9991-f6364ddbfce8","keyName":"e2e-rate-a-3b12c8","selected_subscription":"e2e-rate-iso-a-3b12c8","selected_subscription_key":"ai-tenant-e2e-shared-a-d96a19/e2e-rate-iso-a-3b12c8@ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-d96a19/models/facebook/opt-125m","name":"rate-test-model-d96a19","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3b12c8","namespace":"ai-tenant-e2e-shared-a-d96a19","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4feb9b0e-f8d0-406d-b2a2-c30253212905","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T15:22:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4feb9b0e-f8d0-406d-b2a2-c30253212905","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T15:22:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f786465a-d398-4a0b-800c-e279174733c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60238","PortSpecifier":{"PortValue":60238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f786465a-d398-4a0b-800c-e279174733c1","method":"POST","path":"/ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19/v1/completions","host":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T15:22:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f786465a-d398-4a0b-800c-e279174733c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60238","PortSpecifier":{"PortValue":60238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785252153,"nanos":346161346},"http":{"id":"f786465a-d398-4a0b-800c-e279174733c1","method":"POST","headers":{":authority":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:22:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f786465a-d398-4a0b-800c-e279174733c1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BG7YpI6JhbeoE7dP_odyhXMORCFyq1aU79ikCBrpx0kEUBHwFmGXIvVfomL4"} {"level":"debug","ts":"2026-07-28T15:22:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f786465a-d398-4a0b-800c-e279174733c1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d96a19.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BG7YpI6JhbeoE7dP_odyhXMORCFyq1aU79ikCBrpx0kEUBHwFmGXIvVfomL4\"}"} {"level":"debug","ts":"2026-07-28T15:22:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f786465a-d398-4a0b-800c-e279174733c1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d96a19.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"daab93c7-31fc-48d6-9991-f6364ddbfce8","keyName":"e2e-rate-a-3b12c8","subscription":"e2e-rate-iso-a-3b12c8","tenant":"e2e-shared-a-d96a19","userId":"daab93c7-31fc-48d6-9991-f6364ddbfce8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-28T15:22:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f786465a-d398-4a0b-800c-e279174733c1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d96a19.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19\",\"requestedSubscription\":\"e2e-rate-iso-a-3b12c8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-28T15:22:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f786465a-d398-4a0b-800c-e279174733c1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d96a19.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-d96a19/models/facebook/opt-125m","name":"rate-test-model-d96a19","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3b12c8","namespace":"ai-tenant-e2e-shared-a-d96a19","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19"}} {"level":"debug","ts":"2026-07-28T15:22:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f786465a-d398-4a0b-800c-e279174733c1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:22:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f786465a-d398-4a0b-800c-e279174733c1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f786465a-d398-4a0b-800c-e279174733c1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f786465a-d398-4a0b-800c-e279174733c1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f786465a-d398-4a0b-800c-e279174733c1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d96a19/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f786465a-d398-4a0b-800c-e279174733c1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T15:22:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f786465a-d398-4a0b-800c-e279174733c1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3b12c8"} {"level":"debug","ts":"2026-07-28T15:22:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f786465a-d398-4a0b-800c-e279174733c1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T15:22:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f786465a-d398-4a0b-800c-e279174733c1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"daab93c7-31fc-48d6-9991-f6364ddbfce8","keyName":"e2e-rate-a-3b12c8","selected_subscription":"e2e-rate-iso-a-3b12c8","selected_subscription_key":"ai-tenant-e2e-shared-a-d96a19/e2e-rate-iso-a-3b12c8@ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-d96a19/models/facebook/opt-125m","name":"rate-test-model-d96a19","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3b12c8","namespace":"ai-tenant-e2e-shared-a-d96a19","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-28T15:22:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f786465a-d398-4a0b-800c-e279174733c1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T15:22:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f786465a-d398-4a0b-800c-e279174733c1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T15:22:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9bf1a0c-6d66-4660-99c5-c06777fb8553","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60252","PortSpecifier":{"PortValue":60252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d9bf1a0c-6d66-4660-99c5-c06777fb8553","method":"POST","path":"/ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19/v1/completions","host":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T15:22:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9bf1a0c-6d66-4660-99c5-c06777fb8553","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60252","PortSpecifier":{"PortValue":60252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785252154,"nanos":391938424},"http":{"id":"d9bf1a0c-6d66-4660-99c5-c06777fb8553","method":"POST","headers":{":authority":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:22:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d9bf1a0c-6d66-4660-99c5-c06777fb8553","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BG7YpI6JhbeoE7dP_odyhXMORCFyq1aU79ikCBrpx0kEUBHwFmGXIvVfomL4"} {"level":"debug","ts":"2026-07-28T15:22:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d9bf1a0c-6d66-4660-99c5-c06777fb8553","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d96a19.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BG7YpI6JhbeoE7dP_odyhXMORCFyq1aU79ikCBrpx0kEUBHwFmGXIvVfomL4\"}"} {"level":"debug","ts":"2026-07-28T15:22:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d9bf1a0c-6d66-4660-99c5-c06777fb8553","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d96a19.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"daab93c7-31fc-48d6-9991-f6364ddbfce8","keyName":"e2e-rate-a-3b12c8","subscription":"e2e-rate-iso-a-3b12c8","tenant":"e2e-shared-a-d96a19","userId":"daab93c7-31fc-48d6-9991-f6364ddbfce8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-28T15:22:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d9bf1a0c-6d66-4660-99c5-c06777fb8553","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d96a19.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19\",\"requestedSubscription\":\"e2e-rate-iso-a-3b12c8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-28T15:22:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d9bf1a0c-6d66-4660-99c5-c06777fb8553","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d96a19.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-d96a19/models/facebook/opt-125m","name":"rate-test-model-d96a19","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3b12c8","namespace":"ai-tenant-e2e-shared-a-d96a19","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19"}} {"level":"debug","ts":"2026-07-28T15:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d9bf1a0c-6d66-4660-99c5-c06777fb8553","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9bf1a0c-6d66-4660-99c5-c06777fb8553","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9bf1a0c-6d66-4660-99c5-c06777fb8553","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9bf1a0c-6d66-4660-99c5-c06777fb8553","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9bf1a0c-6d66-4660-99c5-c06777fb8553","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d96a19/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9bf1a0c-6d66-4660-99c5-c06777fb8553","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T15:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9bf1a0c-6d66-4660-99c5-c06777fb8553","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T15:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9bf1a0c-6d66-4660-99c5-c06777fb8553","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3b12c8"} {"level":"debug","ts":"2026-07-28T15:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9bf1a0c-6d66-4660-99c5-c06777fb8553","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"daab93c7-31fc-48d6-9991-f6364ddbfce8","keyName":"e2e-rate-a-3b12c8","selected_subscription":"e2e-rate-iso-a-3b12c8","selected_subscription_key":"ai-tenant-e2e-shared-a-d96a19/e2e-rate-iso-a-3b12c8@ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-d96a19/models/facebook/opt-125m","name":"rate-test-model-d96a19","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3b12c8","namespace":"ai-tenant-e2e-shared-a-d96a19","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-28T15:22:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9bf1a0c-6d66-4660-99c5-c06777fb8553","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T15:22:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9bf1a0c-6d66-4660-99c5-c06777fb8553","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c8dc117-88bd-4992-92f0-f4903bfc600a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:38110","PortSpecifier":{"PortValue":38110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1c8dc117-88bd-4992-92f0-f4903bfc600a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c8dc117-88bd-4992-92f0-f4903bfc600a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:38110","PortSpecifier":{"PortValue":38110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785252172,"nanos":873594820},"http":{"id":"1c8dc117-88bd-4992-92f0-f4903bfc600a","method":"POST","headers":{":authority":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1c8dc117-88bd-4992-92f0-f4903bfc600a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1c8dc117-88bd-4992-92f0-f4903bfc600a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"dd71831b-4afb-48e1-a707-c0d301a2240b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a65def0-5b0b-4d55-8532-0cdc88dc1480"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/22bc79c9c7f1"]}} {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1c8dc117-88bd-4992-92f0-f4903bfc600a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/22bc79c9c7f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a65def0-5b0b-4d55-8532-0cdc88dc1480"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"dd71831b-4afb-48e1-a707-c0d301a2240b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"00b67e61508b1c4a3a360b213fe1ee4ace1d30b728cc26b8b1687b99fc16d00e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c8dc117-88bd-4992-92f0-f4903bfc600a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c8dc117-88bd-4992-92f0-f4903bfc600a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c8dc117-88bd-4992-92f0-f4903bfc600a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d96a19/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1c8dc117-88bd-4992-92f0-f4903bfc600a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c8dc117-88bd-4992-92f0-f4903bfc600a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c8dc117-88bd-4992-92f0-f4903bfc600a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c8dc117-88bd-4992-92f0-f4903bfc600a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c8dc117-88bd-4992-92f0-f4903bfc600a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b38a0d64-e89b-47ab-8698-b9cbd5adb258","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:55764","PortSpecifier":{"PortValue":55764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b38a0d64-e89b-47ab-8698-b9cbd5adb258","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3edd55.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b38a0d64-e89b-47ab-8698-b9cbd5adb258","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:55764","PortSpecifier":{"PortValue":55764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785252172,"nanos":913908508},"http":{"id":"b38a0d64-e89b-47ab-8698-b9cbd5adb258","method":"POST","headers":{":authority":"e2e-shared-b-3edd55.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b38a0d64-e89b-47ab-8698-b9cbd5adb258","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b38a0d64-e89b-47ab-8698-b9cbd5adb258","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"dd71831b-4afb-48e1-a707-c0d301a2240b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a65def0-5b0b-4d55-8532-0cdc88dc1480"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/22bc79c9c7f1"]}} {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b38a0d64-e89b-47ab-8698-b9cbd5adb258","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/22bc79c9c7f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a65def0-5b0b-4d55-8532-0cdc88dc1480"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"dd71831b-4afb-48e1-a707-c0d301a2240b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3edd55.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b38a0d64-e89b-47ab-8698-b9cbd5adb258","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b38a0d64-e89b-47ab-8698-b9cbd5adb258","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b38a0d64-e89b-47ab-8698-b9cbd5adb258","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3edd55/rate-test-model-3edd55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3edd55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b38a0d64-e89b-47ab-8698-b9cbd5adb258","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b38a0d64-e89b-47ab-8698-b9cbd5adb258","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b38a0d64-e89b-47ab-8698-b9cbd5adb258","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b38a0d64-e89b-47ab-8698-b9cbd5adb258","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b38a0d64-e89b-47ab-8698-b9cbd5adb258","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80812b24-bf21-403b-b31c-3afe4732f964","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:38114","PortSpecifier":{"PortValue":38114}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"80812b24-bf21-403b-b31c-3afe4732f964","method":"POST","path":"/ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19/v1/completions","host":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80812b24-bf21-403b-b31c-3afe4732f964","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:38114","PortSpecifier":{"PortValue":38114}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785252172,"nanos":956315403},"http":{"id":"80812b24-bf21-403b-b31c-3afe4732f964","method":"POST","headers":{":authority":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"80812b24-bf21-403b-b31c-3afe4732f964","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-188HLYn9r0ts9XkEW_QiuANdatYRPuPcPQMCGRgKj82TaeOGVP1f42On0xRwM"} {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"80812b24-bf21-403b-b31c-3afe4732f964","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d96a19.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-188HLYn9r0ts9XkEW_QiuANdatYRPuPcPQMCGRgKj82TaeOGVP1f42On0xRwM\"}"} {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"80812b24-bf21-403b-b31c-3afe4732f964","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d96a19.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"daf666ff-2d1a-4af6-b920-7405706ba136","keyName":"e2e-rate-a-d0ba25","subscription":"e2e-rate-iso-a-d0ba25","tenant":"e2e-shared-a-d96a19","userId":"daf666ff-2d1a-4af6-b920-7405706ba136","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"80812b24-bf21-403b-b31c-3afe4732f964","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d96a19.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19\",\"requestedSubscription\":\"e2e-rate-iso-a-d0ba25\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"80812b24-bf21-403b-b31c-3afe4732f964","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d96a19.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-d96a19/models/facebook/opt-125m","name":"rate-test-model-d96a19","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0ba25","namespace":"ai-tenant-e2e-shared-a-d96a19","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19"}} {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"80812b24-bf21-403b-b31c-3afe4732f964","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80812b24-bf21-403b-b31c-3afe4732f964","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80812b24-bf21-403b-b31c-3afe4732f964","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80812b24-bf21-403b-b31c-3afe4732f964","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80812b24-bf21-403b-b31c-3afe4732f964","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d96a19/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80812b24-bf21-403b-b31c-3afe4732f964","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80812b24-bf21-403b-b31c-3afe4732f964","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80812b24-bf21-403b-b31c-3afe4732f964","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d0ba25"} {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80812b24-bf21-403b-b31c-3afe4732f964","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"daf666ff-2d1a-4af6-b920-7405706ba136","keyName":"e2e-rate-a-d0ba25","selected_subscription":"e2e-rate-iso-a-d0ba25","selected_subscription_key":"ai-tenant-e2e-shared-a-d96a19/e2e-rate-iso-a-d0ba25@ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-d96a19/models/facebook/opt-125m","name":"rate-test-model-d96a19","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0ba25","namespace":"ai-tenant-e2e-shared-a-d96a19","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80812b24-bf21-403b-b31c-3afe4732f964","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T15:22:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80812b24-bf21-403b-b31c-3afe4732f964","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T15:22:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"569616ee-ed44-4d97-a336-38dadcfba02c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:38128","PortSpecifier":{"PortValue":38128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"569616ee-ed44-4d97-a336-38dadcfba02c","method":"POST","path":"/ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19/v1/completions","host":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T15:22:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"569616ee-ed44-4d97-a336-38dadcfba02c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:38128","PortSpecifier":{"PortValue":38128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785252173,"nanos":993599647},"http":{"id":"569616ee-ed44-4d97-a336-38dadcfba02c","method":"POST","headers":{":authority":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:22:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"569616ee-ed44-4d97-a336-38dadcfba02c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-188HLYn9r0ts9XkEW_QiuANdatYRPuPcPQMCGRgKj82TaeOGVP1f42On0xRwM"} {"level":"debug","ts":"2026-07-28T15:22:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"569616ee-ed44-4d97-a336-38dadcfba02c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d96a19.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-188HLYn9r0ts9XkEW_QiuANdatYRPuPcPQMCGRgKj82TaeOGVP1f42On0xRwM\"}"} {"level":"debug","ts":"2026-07-28T15:22:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"569616ee-ed44-4d97-a336-38dadcfba02c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d96a19.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"daf666ff-2d1a-4af6-b920-7405706ba136","keyName":"e2e-rate-a-d0ba25","subscription":"e2e-rate-iso-a-d0ba25","tenant":"e2e-shared-a-d96a19","userId":"daf666ff-2d1a-4af6-b920-7405706ba136","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-28T15:22:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"569616ee-ed44-4d97-a336-38dadcfba02c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d96a19.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19\",\"requestedSubscription\":\"e2e-rate-iso-a-d0ba25\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-28T15:22:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"569616ee-ed44-4d97-a336-38dadcfba02c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d96a19.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-d96a19/models/facebook/opt-125m","name":"rate-test-model-d96a19","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0ba25","namespace":"ai-tenant-e2e-shared-a-d96a19","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19"}} {"level":"debug","ts":"2026-07-28T15:22:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"569616ee-ed44-4d97-a336-38dadcfba02c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:22:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"569616ee-ed44-4d97-a336-38dadcfba02c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"569616ee-ed44-4d97-a336-38dadcfba02c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"569616ee-ed44-4d97-a336-38dadcfba02c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"569616ee-ed44-4d97-a336-38dadcfba02c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d96a19/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"569616ee-ed44-4d97-a336-38dadcfba02c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T15:22:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"569616ee-ed44-4d97-a336-38dadcfba02c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d0ba25"} {"level":"debug","ts":"2026-07-28T15:22:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"569616ee-ed44-4d97-a336-38dadcfba02c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T15:22:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"569616ee-ed44-4d97-a336-38dadcfba02c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"daf666ff-2d1a-4af6-b920-7405706ba136","keyName":"e2e-rate-a-d0ba25","selected_subscription":"e2e-rate-iso-a-d0ba25","selected_subscription_key":"ai-tenant-e2e-shared-a-d96a19/e2e-rate-iso-a-d0ba25@ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-d96a19/models/facebook/opt-125m","name":"rate-test-model-d96a19","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0ba25","namespace":"ai-tenant-e2e-shared-a-d96a19","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-28T15:22:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"569616ee-ed44-4d97-a336-38dadcfba02c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T15:22:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"569616ee-ed44-4d97-a336-38dadcfba02c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2da29bd8-2e8f-488e-ad96-75e3c144709c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:38142","PortSpecifier":{"PortValue":38142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2da29bd8-2e8f-488e-ad96-75e3c144709c","method":"POST","path":"/ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19/v1/completions","host":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2da29bd8-2e8f-488e-ad96-75e3c144709c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:38142","PortSpecifier":{"PortValue":38142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785252175,"nanos":32644984},"http":{"id":"2da29bd8-2e8f-488e-ad96-75e3c144709c","method":"POST","headers":{":authority":"e2e-shared-a-d96a19.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2da29bd8-2e8f-488e-ad96-75e3c144709c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-188HLYn9r0ts9XkEW_QiuANdatYRPuPcPQMCGRgKj82TaeOGVP1f42On0xRwM"} {"level":"debug","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2da29bd8-2e8f-488e-ad96-75e3c144709c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d96a19.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-188HLYn9r0ts9XkEW_QiuANdatYRPuPcPQMCGRgKj82TaeOGVP1f42On0xRwM\"}"} {"level":"debug","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2da29bd8-2e8f-488e-ad96-75e3c144709c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d96a19.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"daf666ff-2d1a-4af6-b920-7405706ba136","keyName":"e2e-rate-a-d0ba25","subscription":"e2e-rate-iso-a-d0ba25","tenant":"e2e-shared-a-d96a19","userId":"daf666ff-2d1a-4af6-b920-7405706ba136","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2da29bd8-2e8f-488e-ad96-75e3c144709c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d96a19.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19\",\"requestedSubscription\":\"e2e-rate-iso-a-d0ba25\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2da29bd8-2e8f-488e-ad96-75e3c144709c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d96a19.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-d96a19/models/facebook/opt-125m","name":"rate-test-model-d96a19","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0ba25","namespace":"ai-tenant-e2e-shared-a-d96a19","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19"}} {"level":"debug","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2da29bd8-2e8f-488e-ad96-75e3c144709c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2da29bd8-2e8f-488e-ad96-75e3c144709c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2da29bd8-2e8f-488e-ad96-75e3c144709c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2da29bd8-2e8f-488e-ad96-75e3c144709c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d96a19/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2da29bd8-2e8f-488e-ad96-75e3c144709c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2da29bd8-2e8f-488e-ad96-75e3c144709c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2da29bd8-2e8f-488e-ad96-75e3c144709c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2da29bd8-2e8f-488e-ad96-75e3c144709c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d0ba25"} {"level":"debug","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2da29bd8-2e8f-488e-ad96-75e3c144709c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"daf666ff-2d1a-4af6-b920-7405706ba136","keyName":"e2e-rate-a-d0ba25","selected_subscription":"e2e-rate-iso-a-d0ba25","selected_subscription_key":"ai-tenant-e2e-shared-a-d96a19/e2e-rate-iso-a-d0ba25@ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-d96a19/models/facebook/opt-125m","name":"rate-test-model-d96a19","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0ba25","namespace":"ai-tenant-e2e-shared-a-d96a19","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d96a19/rate-test-model-d96a19"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2da29bd8-2e8f-488e-ad96-75e3c144709c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2da29bd8-2e8f-488e-ad96-75e3c144709c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"362dbb1a-e013-4b00-985f-76ed6197c3ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:55780","PortSpecifier":{"PortValue":55780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"362dbb1a-e013-4b00-985f-76ed6197c3ca","method":"POST","path":"/ai-tenant-e2e-shared-b-3edd55/rate-test-model-3edd55/v1/completions","host":"e2e-shared-b-3edd55.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"362dbb1a-e013-4b00-985f-76ed6197c3ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:55780","PortSpecifier":{"PortValue":55780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785252175,"nanos":70948731},"http":{"id":"362dbb1a-e013-4b00-985f-76ed6197c3ca","method":"POST","headers":{":authority":"e2e-shared-b-3edd55.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-3edd55/rate-test-model-3edd55/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"362dbb1a-e013-4b00-985f-76ed6197c3ca","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZGP0Pwe7DJXerCUm_jxUJqRgJuymMzU5Rf8cK9zEim2ABkKe9RKmsXnIciCV"} {"level":"debug","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"362dbb1a-e013-4b00-985f-76ed6197c3ca","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3edd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZGP0Pwe7DJXerCUm_jxUJqRgJuymMzU5Rf8cK9zEim2ABkKe9RKmsXnIciCV\"}"} {"level":"debug","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"362dbb1a-e013-4b00-985f-76ed6197c3ca","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3edd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fdb12864-d85a-4a08-9415-9345343b9471","keyName":"e2e-rate-b-d0ba25","subscription":"e2e-rate-iso-b-d0ba25","tenant":"e2e-shared-b-3edd55","userId":"fdb12864-d85a-4a08-9415-9345343b9471","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"362dbb1a-e013-4b00-985f-76ed6197c3ca","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-3edd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-3edd55/rate-test-model-3edd55\",\"requestedSubscription\":\"e2e-rate-iso-b-d0ba25\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"362dbb1a-e013-4b00-985f-76ed6197c3ca","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3edd55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-3edd55/models/facebook/opt-125m","name":"rate-test-model-3edd55","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d0ba25","namespace":"ai-tenant-e2e-shared-b-3edd55","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-3edd55/rate-test-model-3edd55"}} {"level":"debug","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"362dbb1a-e013-4b00-985f-76ed6197c3ca","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"362dbb1a-e013-4b00-985f-76ed6197c3ca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"362dbb1a-e013-4b00-985f-76ed6197c3ca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"362dbb1a-e013-4b00-985f-76ed6197c3ca","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"362dbb1a-e013-4b00-985f-76ed6197c3ca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3edd55/rate-test-model-3edd55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3edd55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"362dbb1a-e013-4b00-985f-76ed6197c3ca","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"362dbb1a-e013-4b00-985f-76ed6197c3ca","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"362dbb1a-e013-4b00-985f-76ed6197c3ca","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-d0ba25"} {"level":"debug","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"362dbb1a-e013-4b00-985f-76ed6197c3ca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fdb12864-d85a-4a08-9415-9345343b9471","keyName":"e2e-rate-b-d0ba25","selected_subscription":"e2e-rate-iso-b-d0ba25","selected_subscription_key":"ai-tenant-e2e-shared-b-3edd55/e2e-rate-iso-b-d0ba25@ai-tenant-e2e-shared-b-3edd55/rate-test-model-3edd55","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-3edd55/models/facebook/opt-125m","name":"rate-test-model-3edd55","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d0ba25","namespace":"ai-tenant-e2e-shared-b-3edd55","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-3edd55/rate-test-model-3edd55"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"362dbb1a-e013-4b00-985f-76ed6197c3ca","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T15:22:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"362dbb1a-e013-4b00-985f-76ed6197c3ca","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T15:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db405868d91580167ca7f6f40073dbc709506de659ed3b375a39d2e5d94455c4"} {"level":"info","ts":"2026-07-28T15:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75b55fd163a8a29724d6cac57663da876660091dcd9673a38ce4b9dda0b77944"} {"level":"info","ts":"2026-07-28T15:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a9d3d6bb29aab2098d7a8673361737bcfdd4f11870dd0828580fb8bd1565f02"} {"level":"info","ts":"2026-07-28T15:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/341b327a00b22525186108e2c8b4d5871ae9b57aa0ebf4e73b763c8a07d8f432"} {"level":"info","ts":"2026-07-28T15:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40a68dc75e5d4f00a90293829eef19d6ffb3ec98a3e71575ad453681c39ad891"} {"level":"info","ts":"2026-07-28T15:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a36332e0007ef0a3de2991ed04f6888248bdf8a30479c8126e030b296907af10"} {"level":"info","ts":"2026-07-28T15:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13228005a77f31fb93e6eda1f95b8402d89e9e1ade3e7a89f617284e4dcd2fd7"} {"level":"info","ts":"2026-07-28T15:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/387e035e760eba6623a74135535a26677c0c656ac0f03d5df24f86c3647deede"} {"level":"info","ts":"2026-07-28T15:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4d2f0def5ddda0bf47473168c38605c9424f456b8a049ef3fee3c9ed94caa29"} {"level":"info","ts":"2026-07-28T15:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a867f73820eb1811c3693d744b46b34d9d4b297eadf4a8d13ef2e7c5a309d1c"} {"level":"info","ts":"2026-07-28T15:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/153556a9bb890845ccd507782d9950a8a07f310eb5885eb2d6243f5bff55a789"} {"level":"info","ts":"2026-07-28T15:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ab4cea6fd0cdb355c254f1b3c30a0abd23f5f951b9a91c25eb659d838ea66eb"} {"level":"info","ts":"2026-07-28T15:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ff34689436bd5fb66d37dca9292737cc4f1d9786565fa6abffd61e2314a3167"} {"level":"info","ts":"2026-07-28T15:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49dae68d4f3d6db7aa219c3f2a89bdec94d9fed7bca7f8de1dcae33e02cf3200"} {"level":"info","ts":"2026-07-28T15:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ffe8861e7feaef9a693de983cbe8cb606244003c6defcc06d0c1749dd3719c0"} {"level":"info","ts":"2026-07-28T15:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b07a9f3abc6bb60e543ee1a98031aad4a3e86aab2e86a3b7b5cafa0b9d8adeb2"} {"level":"info","ts":"2026-07-28T15:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00b67e61508b1c4a3a360b213fe1ee4ace1d30b728cc26b8b1687b99fc16d00e"} {"level":"info","ts":"2026-07-28T15:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea52a0398641a0fc69a6dec07cdd6df3bf05579b0bea8f4f2866ea9f43dabff8"} {"level":"info","ts":"2026-07-28T15:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/328d6c1e472f905820e11a6a7acb51ede2d53365846ebca42092d94abfc16584"} {"level":"info","ts":"2026-07-28T15:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b98a155b4497eb9bae4f5c1e10202154f08326e448ce1ef5295ce73c7413305e"} {"level":"info","ts":"2026-07-28T15:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/039f22614e424bc8cac79a63a2a1282dce6519e6787a0c80ff558e9faef71307"} {"level":"info","ts":"2026-07-28T15:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d159307c4542138390db1b6c754dd8b628b5daf08cc10a964635058de1a60d6"} {"level":"info","ts":"2026-07-28T15:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14ea452faeba47486034dd0808f2dafc55aaa3363fc580d207b2317638238b38"} {"level":"info","ts":"2026-07-28T15:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac1662982a03563c3238ac86899d8058c3484e6dd3a3c34c1bafcb35041800d7"} {"level":"info","ts":"2026-07-28T15:24:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c659d3f-90a3-4e30-87ab-a1932f947a21","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45654","PortSpecifier":{"PortValue":45654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c659d3f-90a3-4e30-87ab-a1932f947a21","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T15:24:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c659d3f-90a3-4e30-87ab-a1932f947a21","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45654","PortSpecifier":{"PortValue":45654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785252251,"nanos":25619778},"http":{"id":"7c659d3f-90a3-4e30-87ab-a1932f947a21","method":"POST","headers":{":authority":"maas.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:24:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7c659d3f-90a3-4e30-87ab-a1932f947a21","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T15:24:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c659d3f-90a3-4e30-87ab-a1932f947a21","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"dd71831b-4afb-48e1-a707-c0d301a2240b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a65def0-5b0b-4d55-8532-0cdc88dc1480"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/22bc79c9c7f1"]}} {"level":"debug","ts":"2026-07-28T15:24:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c659d3f-90a3-4e30-87ab-a1932f947a21","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/22bc79c9c7f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a65def0-5b0b-4d55-8532-0cdc88dc1480"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"dd71831b-4afb-48e1-a707-c0d301a2240b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.27:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:24:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c659d3f-90a3-4e30-87ab-a1932f947a21","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:24:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c659d3f-90a3-4e30-87ab-a1932f947a21","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:24:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c659d3f-90a3-4e30-87ab-a1932f947a21","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:24:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7c659d3f-90a3-4e30-87ab-a1932f947a21","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T15:24:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c659d3f-90a3-4e30-87ab-a1932f947a21","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T15:24:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c659d3f-90a3-4e30-87ab-a1932f947a21","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T15:24:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c659d3f-90a3-4e30-87ab-a1932f947a21","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T15:24:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c659d3f-90a3-4e30-87ab-a1932f947a21","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T15:24:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08511fc0-aeb7-4a82-8366-092a020f1b7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45666","PortSpecifier":{"PortValue":45666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"08511fc0-aeb7-4a82-8366-092a020f1b7e","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T15:24:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08511fc0-aeb7-4a82-8366-092a020f1b7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45666","PortSpecifier":{"PortValue":45666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785252251,"nanos":82240211},"http":{"id":"08511fc0-aeb7-4a82-8366-092a020f1b7e","method":"POST","headers":{":authority":"maas.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:24:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"08511fc0-aeb7-4a82-8366-092a020f1b7e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Ofo41NB00P0Yt1o5_ouMb11lsIZwVcZWE7EehfqVyeJqPb2EfGn35QmHVdmy"} {"level":"debug","ts":"2026-07-28T15:24:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"08511fc0-aeb7-4a82-8366-092a020f1b7e","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Ofo41NB00P0Yt1o5_ouMb11lsIZwVcZWE7EehfqVyeJqPb2EfGn35QmHVdmy\"}"} {"level":"debug","ts":"2026-07-28T15:24:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"08511fc0-aeb7-4a82-8366-092a020f1b7e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"01c71dea-7baa-44ae-a854-09971e708c9a","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"01c71dea-7baa-44ae-a854-09971e708c9a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-28T15:24:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"08511fc0-aeb7-4a82-8366-092a020f1b7e","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-28T15:24:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"08511fc0-aeb7-4a82-8366-092a020f1b7e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-07-28T15:24:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"08511fc0-aeb7-4a82-8366-092a020f1b7e","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.27:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:24:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08511fc0-aeb7-4a82-8366-092a020f1b7e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:24:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08511fc0-aeb7-4a82-8366-092a020f1b7e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:24:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08511fc0-aeb7-4a82-8366-092a020f1b7e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:24:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08511fc0-aeb7-4a82-8366-092a020f1b7e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:24:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08511fc0-aeb7-4a82-8366-092a020f1b7e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T15:24:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08511fc0-aeb7-4a82-8366-092a020f1b7e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-07-28T15:24:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08511fc0-aeb7-4a82-8366-092a020f1b7e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T15:24:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08511fc0-aeb7-4a82-8366-092a020f1b7e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"01c71dea-7baa-44ae-a854-09971e708c9a","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-28T15:24:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08511fc0-aeb7-4a82-8366-092a020f1b7e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T15:24:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08511fc0-aeb7-4a82-8366-092a020f1b7e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T15:24:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:24:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:24:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:24:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:24:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee"} {"level":"info","ts":"2026-07-28T15:24:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:24:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:24:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee"} {"level":"error","ts":"2026-07-28T15:24:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-28T15:24:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee"} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee"} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b07946358aa1770e2d900b8a177a232c8c6529978632c886f7a2bc0d23ac924","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee"} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b07946358aa1770e2d900b8a177a232c8c6529978632c886f7a2bc0d23ac924","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b07946358aa1770e2d900b8a177a232c8c6529978632c886f7a2bc0d23ac924","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b07946358aa1770e2d900b8a177a232c8c6529978632c886f7a2bc0d23ac924"} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b07946358aa1770e2d900b8a177a232c8c6529978632c886f7a2bc0d23ac924","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee"} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b07946358aa1770e2d900b8a177a232c8c6529978632c886f7a2bc0d23ac924","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b07946358aa1770e2d900b8a177a232c8c6529978632c886f7a2bc0d23ac924"} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee"} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b07946358aa1770e2d900b8a177a232c8c6529978632c886f7a2bc0d23ac924","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b07946358aa1770e2d900b8a177a232c8c6529978632c886f7a2bc0d23ac924"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b07946358aa1770e2d900b8a177a232c8c6529978632c886f7a2bc0d23ac924","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58d8a65d752ab00dfa448cac9e2b327ef7fdcc127c4530b77fbba141798413d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee"} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58d8a65d752ab00dfa448cac9e2b327ef7fdcc127c4530b77fbba141798413d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b07946358aa1770e2d900b8a177a232c8c6529978632c886f7a2bc0d23ac924","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58d8a65d752ab00dfa448cac9e2b327ef7fdcc127c4530b77fbba141798413d0"} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58d8a65d752ab00dfa448cac9e2b327ef7fdcc127c4530b77fbba141798413d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58d8a65d752ab00dfa448cac9e2b327ef7fdcc127c4530b77fbba141798413d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee"} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58d8a65d752ab00dfa448cac9e2b327ef7fdcc127c4530b77fbba141798413d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58d8a65d752ab00dfa448cac9e2b327ef7fdcc127c4530b77fbba141798413d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b07946358aa1770e2d900b8a177a232c8c6529978632c886f7a2bc0d23ac924"} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58d8a65d752ab00dfa448cac9e2b327ef7fdcc127c4530b77fbba141798413d0"} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b77991b32c82ace2f17c711bd2b45a60284f993bebf7e300e3f1c7eeea17e21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee"} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b77991b32c82ace2f17c711bd2b45a60284f993bebf7e300e3f1c7eeea17e21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b77991b32c82ace2f17c711bd2b45a60284f993bebf7e300e3f1c7eeea17e21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b77991b32c82ace2f17c711bd2b45a60284f993bebf7e300e3f1c7eeea17e21"} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b77991b32c82ace2f17c711bd2b45a60284f993bebf7e300e3f1c7eeea17e21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1"} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b77991b32c82ace2f17c711bd2b45a60284f993bebf7e300e3f1c7eeea17e21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b77991b32c82ace2f17c711bd2b45a60284f993bebf7e300e3f1c7eeea17e21"} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1"} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b77991b32c82ace2f17c711bd2b45a60284f993bebf7e300e3f1c7eeea17e21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b77991b32c82ace2f17c711bd2b45a60284f993bebf7e300e3f1c7eeea17e21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b77991b32c82ace2f17c711bd2b45a60284f993bebf7e300e3f1c7eeea17e21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f7c1adde59b679e1b4c4eb9014dbc8d3e8685067f927cd71d9b065d11b9bc2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f7c1adde59b679e1b4c4eb9014dbc8d3e8685067f927cd71d9b065d11b9bc2f"} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f7c1adde59b679e1b4c4eb9014dbc8d3e8685067f927cd71d9b065d11b9bc2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b77991b32c82ace2f17c711bd2b45a60284f993bebf7e300e3f1c7eeea17e21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f7c1adde59b679e1b4c4eb9014dbc8d3e8685067f927cd71d9b065d11b9bc2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f7c1adde59b679e1b4c4eb9014dbc8d3e8685067f927cd71d9b065d11b9bc2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1"} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f7c1adde59b679e1b4c4eb9014dbc8d3e8685067f927cd71d9b065d11b9bc2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f7c1adde59b679e1b4c4eb9014dbc8d3e8685067f927cd71d9b065d11b9bc2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f7c1adde59b679e1b4c4eb9014dbc8d3e8685067f927cd71d9b065d11b9bc2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b77991b32c82ace2f17c711bd2b45a60284f993bebf7e300e3f1c7eeea17e21"} {"level":"error","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4f7c1adde59b679e1b4c4eb9014dbc8d3e8685067f927cd71d9b065d11b9bc2f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4f7c1adde59b679e1b4c4eb9014dbc8d3e8685067f927cd71d9b065d11b9bc2f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f7c1adde59b679e1b4c4eb9014dbc8d3e8685067f927cd71d9b065d11b9bc2f"} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f7c1adde59b679e1b4c4eb9014dbc8d3e8685067f927cd71d9b065d11b9bc2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1"} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1"} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1"} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1"} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1"} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fb8dc8cd951dac26caf980acfaf92df5e5404a9294c8bc1efe92a4f3e702578","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1"} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fb8dc8cd951dac26caf980acfaf92df5e5404a9294c8bc1efe92a4f3e702578","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fb8dc8cd951dac26caf980acfaf92df5e5404a9294c8bc1efe92a4f3e702578","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fb8dc8cd951dac26caf980acfaf92df5e5404a9294c8bc1efe92a4f3e702578","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fb8dc8cd951dac26caf980acfaf92df5e5404a9294c8bc1efe92a4f3e702578"} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fb8dc8cd951dac26caf980acfaf92df5e5404a9294c8bc1efe92a4f3e702578","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fb8dc8cd951dac26caf980acfaf92df5e5404a9294c8bc1efe92a4f3e702578","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fb8dc8cd951dac26caf980acfaf92df5e5404a9294c8bc1efe92a4f3e702578"} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fb8dc8cd951dac26caf980acfaf92df5e5404a9294c8bc1efe92a4f3e702578","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fb8dc8cd951dac26caf980acfaf92df5e5404a9294c8bc1efe92a4f3e702578"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1"} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fb8dc8cd951dac26caf980acfaf92df5e5404a9294c8bc1efe92a4f3e702578","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fb8dc8cd951dac26caf980acfaf92df5e5404a9294c8bc1efe92a4f3e702578","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fb8dc8cd951dac26caf980acfaf92df5e5404a9294c8bc1efe92a4f3e702578","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fb8dc8cd951dac26caf980acfaf92df5e5404a9294c8bc1efe92a4f3e702578","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fb8dc8cd951dac26caf980acfaf92df5e5404a9294c8bc1efe92a4f3e702578"} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fb8dc8cd951dac26caf980acfaf92df5e5404a9294c8bc1efe92a4f3e702578","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fb8dc8cd951dac26caf980acfaf92df5e5404a9294c8bc1efe92a4f3e702578"} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fb8dc8cd951dac26caf980acfaf92df5e5404a9294c8bc1efe92a4f3e702578","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fb8dc8cd951dac26caf980acfaf92df5e5404a9294c8bc1efe92a4f3e702578"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fb8dc8cd951dac26caf980acfaf92df5e5404a9294c8bc1efe92a4f3e702578","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70bfdfcf7ce9c7fc65fd922b6c80d9ed4f169a68768fd99e52be76f529dbeac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70bfdfcf7ce9c7fc65fd922b6c80d9ed4f169a68768fd99e52be76f529dbeac1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fb8dc8cd951dac26caf980acfaf92df5e5404a9294c8bc1efe92a4f3e702578","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70bfdfcf7ce9c7fc65fd922b6c80d9ed4f169a68768fd99e52be76f529dbeac1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70bfdfcf7ce9c7fc65fd922b6c80d9ed4f169a68768fd99e52be76f529dbeac1"} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70bfdfcf7ce9c7fc65fd922b6c80d9ed4f169a68768fd99e52be76f529dbeac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70bfdfcf7ce9c7fc65fd922b6c80d9ed4f169a68768fd99e52be76f529dbeac1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fb8dc8cd951dac26caf980acfaf92df5e5404a9294c8bc1efe92a4f3e702578"} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70bfdfcf7ce9c7fc65fd922b6c80d9ed4f169a68768fd99e52be76f529dbeac1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70bfdfcf7ce9c7fc65fd922b6c80d9ed4f169a68768fd99e52be76f529dbeac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70bfdfcf7ce9c7fc65fd922b6c80d9ed4f169a68768fd99e52be76f529dbeac1"} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70bfdfcf7ce9c7fc65fd922b6c80d9ed4f169a68768fd99e52be76f529dbeac1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70bfdfcf7ce9c7fc65fd922b6c80d9ed4f169a68768fd99e52be76f529dbeac1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70bfdfcf7ce9c7fc65fd922b6c80d9ed4f169a68768fd99e52be76f529dbeac1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70bfdfcf7ce9c7fc65fd922b6c80d9ed4f169a68768fd99e52be76f529dbeac1"} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70bfdfcf7ce9c7fc65fd922b6c80d9ed4f169a68768fd99e52be76f529dbeac1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bb8faf3f8ea2022299d6c861bd87e8604dc020d1cabe2ab3a2ce1566d844dc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70bfdfcf7ce9c7fc65fd922b6c80d9ed4f169a68768fd99e52be76f529dbeac1"} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bb8faf3f8ea2022299d6c861bd87e8604dc020d1cabe2ab3a2ce1566d844dc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bb8faf3f8ea2022299d6c861bd87e8604dc020d1cabe2ab3a2ce1566d844dc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bb8faf3f8ea2022299d6c861bd87e8604dc020d1cabe2ab3a2ce1566d844dc7"} {"level":"info","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bb8faf3f8ea2022299d6c861bd87e8604dc020d1cabe2ab3a2ce1566d844dc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70bfdfcf7ce9c7fc65fd922b6c80d9ed4f169a68768fd99e52be76f529dbeac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:24:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70bfdfcf7ce9c7fc65fd922b6c80d9ed4f169a68768fd99e52be76f529dbeac1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bb8faf3f8ea2022299d6c861bd87e8604dc020d1cabe2ab3a2ce1566d844dc7"} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70bfdfcf7ce9c7fc65fd922b6c80d9ed4f169a68768fd99e52be76f529dbeac1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bb8faf3f8ea2022299d6c861bd87e8604dc020d1cabe2ab3a2ce1566d844dc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70bfdfcf7ce9c7fc65fd922b6c80d9ed4f169a68768fd99e52be76f529dbeac1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bb8faf3f8ea2022299d6c861bd87e8604dc020d1cabe2ab3a2ce1566d844dc7"} {"level":"debug","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bb8faf3f8ea2022299d6c861bd87e8604dc020d1cabe2ab3a2ce1566d844dc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bb8faf3f8ea2022299d6c861bd87e8604dc020d1cabe2ab3a2ce1566d844dc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70bfdfcf7ce9c7fc65fd922b6c80d9ed4f169a68768fd99e52be76f529dbeac1"} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bb8faf3f8ea2022299d6c861bd87e8604dc020d1cabe2ab3a2ce1566d844dc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bb8faf3f8ea2022299d6c861bd87e8604dc020d1cabe2ab3a2ce1566d844dc7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bb8faf3f8ea2022299d6c861bd87e8604dc020d1cabe2ab3a2ce1566d844dc7"} {"level":"debug","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db683e06538641b98f7de7402b19acb55a8e83e82febf3eba3420426bf4b585","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db683e06538641b98f7de7402b19acb55a8e83e82febf3eba3420426bf4b585"} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db683e06538641b98f7de7402b19acb55a8e83e82febf3eba3420426bf4b585","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6db683e06538641b98f7de7402b19acb55a8e83e82febf3eba3420426bf4b585","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6db683e06538641b98f7de7402b19acb55a8e83e82febf3eba3420426bf4b585","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db683e06538641b98f7de7402b19acb55a8e83e82febf3eba3420426bf4b585"} {"level":"debug","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db683e06538641b98f7de7402b19acb55a8e83e82febf3eba3420426bf4b585","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6db683e06538641b98f7de7402b19acb55a8e83e82febf3eba3420426bf4b585"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db683e06538641b98f7de7402b19acb55a8e83e82febf3eba3420426bf4b585","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db683e06538641b98f7de7402b19acb55a8e83e82febf3eba3420426bf4b585","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db683e06538641b98f7de7402b19acb55a8e83e82febf3eba3420426bf4b585","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6db683e06538641b98f7de7402b19acb55a8e83e82febf3eba3420426bf4b585","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db683e06538641b98f7de7402b19acb55a8e83e82febf3eba3420426bf4b585"} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db683e06538641b98f7de7402b19acb55a8e83e82febf3eba3420426bf4b585","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6db683e06538641b98f7de7402b19acb55a8e83e82febf3eba3420426bf4b585"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682"} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db683e06538641b98f7de7402b19acb55a8e83e82febf3eba3420426bf4b585","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db683e06538641b98f7de7402b19acb55a8e83e82febf3eba3420426bf4b585"} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6db683e06538641b98f7de7402b19acb55a8e83e82febf3eba3420426bf4b585","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682"} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db683e06538641b98f7de7402b19acb55a8e83e82febf3eba3420426bf4b585"} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682"} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c464e8eea35a5482e7287f9b7b216008d13f0b7d50f3b39d302152b98236311","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682"} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c464e8eea35a5482e7287f9b7b216008d13f0b7d50f3b39d302152b98236311","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c464e8eea35a5482e7287f9b7b216008d13f0b7d50f3b39d302152b98236311"} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c464e8eea35a5482e7287f9b7b216008d13f0b7d50f3b39d302152b98236311","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c464e8eea35a5482e7287f9b7b216008d13f0b7d50f3b39d302152b98236311"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c464e8eea35a5482e7287f9b7b216008d13f0b7d50f3b39d302152b98236311","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682"} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c464e8eea35a5482e7287f9b7b216008d13f0b7d50f3b39d302152b98236311","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c464e8eea35a5482e7287f9b7b216008d13f0b7d50f3b39d302152b98236311"} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c464e8eea35a5482e7287f9b7b216008d13f0b7d50f3b39d302152b98236311","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c464e8eea35a5482e7287f9b7b216008d13f0b7d50f3b39d302152b98236311","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c464e8eea35a5482e7287f9b7b216008d13f0b7d50f3b39d302152b98236311"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682"} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c464e8eea35a5482e7287f9b7b216008d13f0b7d50f3b39d302152b98236311","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c464e8eea35a5482e7287f9b7b216008d13f0b7d50f3b39d302152b98236311"} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c464e8eea35a5482e7287f9b7b216008d13f0b7d50f3b39d302152b98236311","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c464e8eea35a5482e7287f9b7b216008d13f0b7d50f3b39d302152b98236311"} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c464e8eea35a5482e7287f9b7b216008d13f0b7d50f3b39d302152b98236311","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682"} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c464e8eea35a5482e7287f9b7b216008d13f0b7d50f3b39d302152b98236311"} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c464e8eea35a5482e7287f9b7b216008d13f0b7d50f3b39d302152b98236311","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c464e8eea35a5482e7287f9b7b216008d13f0b7d50f3b39d302152b98236311"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682"} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c464e8eea35a5482e7287f9b7b216008d13f0b7d50f3b39d302152b98236311","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T15:24:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c464e8eea35a5482e7287f9b7b216008d13f0b7d50f3b39d302152b98236311"} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c464e8eea35a5482e7287f9b7b216008d13f0b7d50f3b39d302152b98236311","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T15:24:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682"} {"level":"info","ts":"2026-07-28T15:24:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"acb3a533-bdcd-4151-99dc-62a472e09687","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:41968","PortSpecifier":{"PortValue":41968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"acb3a533-bdcd-4151-99dc-62a472e09687","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-aa49c3.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T15:24:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"acb3a533-bdcd-4151-99dc-62a472e09687","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:41968","PortSpecifier":{"PortValue":41968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785252294,"nanos":148756793},"http":{"id":"acb3a533-bdcd-4151-99dc-62a472e09687","method":"POST","headers":{":authority":"e2e-ipp-a-aa49c3.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:24:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"acb3a533-bdcd-4151-99dc-62a472e09687","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T15:24:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"acb3a533-bdcd-4151-99dc-62a472e09687","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"dd71831b-4afb-48e1-a707-c0d301a2240b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a65def0-5b0b-4d55-8532-0cdc88dc1480"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/22bc79c9c7f1"]}} {"level":"debug","ts":"2026-07-28T15:24:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"acb3a533-bdcd-4151-99dc-62a472e09687","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/22bc79c9c7f1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a65def0-5b0b-4d55-8532-0cdc88dc1480"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"dd71831b-4afb-48e1-a707-c0d301a2240b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0b07946358aa1770e2d900b8a177a232c8c6529978632c886f7a2bc0d23ac924"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-aa49c3.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:24:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acb3a533-bdcd-4151-99dc-62a472e09687","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:24:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acb3a533-bdcd-4151-99dc-62a472e09687","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:24:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acb3a533-bdcd-4151-99dc-62a472e09687","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-aa49c3/ipp-route-aa49c3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-aa49c3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:24:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"acb3a533-bdcd-4151-99dc-62a472e09687","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T15:24:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acb3a533-bdcd-4151-99dc-62a472e09687","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T15:24:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acb3a533-bdcd-4151-99dc-62a472e09687","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T15:24:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"acb3a533-bdcd-4151-99dc-62a472e09687","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T15:24:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"acb3a533-bdcd-4151-99dc-62a472e09687","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T15:24:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e948bfc9-463d-4cbb-bceb-36c73c9abeee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:41970","PortSpecifier":{"PortValue":41970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e948bfc9-463d-4cbb-bceb-36c73c9abeee","method":"POST","path":"/ai-tenant-e2e-ipp-a-aa49c3/ipp-route-aa49c3/v1/chat/completions","host":"e2e-ipp-a-aa49c3.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T15:24:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e948bfc9-463d-4cbb-bceb-36c73c9abeee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:41970","PortSpecifier":{"PortValue":41970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785252296,"nanos":221558964},"http":{"id":"e948bfc9-463d-4cbb-bceb-36c73c9abeee","method":"POST","headers":{":authority":"e2e-ipp-a-aa49c3.apps.5cf502f8-72f4-4051-834d-22bc79c9c7f1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-aa49c3/ipp-route-aa49c3/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:24:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e948bfc9-463d-4cbb-bceb-36c73c9abeee","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-iORtn7VsvfZCESue_upIzPfWCbtWU43tSIoCB5HHBYiE7BIlnU6J5vYPFigj"} {"level":"debug","ts":"2026-07-28T15:24:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e948bfc9-463d-4cbb-bceb-36c73c9abeee","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-aa49c3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-iORtn7VsvfZCESue_upIzPfWCbtWU43tSIoCB5HHBYiE7BIlnU6J5vYPFigj\"}"} {"level":"debug","ts":"2026-07-28T15:24:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e948bfc9-463d-4cbb-bceb-36c73c9abeee","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-aa49c3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4d28f3ab-cd7d-4cd8-8c38-366769374284","keyName":"e2e-ipp-aa49c3","subscription":"ipp-route-aa49c3-sub","tenant":"e2e-ipp-a-aa49c3","userId":"4d28f3ab-cd7d-4cd8-8c38-366769374284","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-28T15:24:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e948bfc9-463d-4cbb-bceb-36c73c9abeee","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-aa49c3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-aa49c3/ipp-route-aa49c3\",\"requestedSubscription\":\"ipp-route-aa49c3-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-28T15:24:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e948bfc9-463d-4cbb-bceb-36c73c9abeee","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-aa49c3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-aa49c3/models/facebook/opt-125m","name":"ipp-route-aa49c3","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-aa49c3-sub","namespace":"ai-tenant-e2e-ipp-a-aa49c3","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-aa49c3/ipp-route-aa49c3"}} {"level":"debug","ts":"2026-07-28T15:24:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e948bfc9-463d-4cbb-bceb-36c73c9abeee","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T15:24:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e948bfc9-463d-4cbb-bceb-36c73c9abeee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:24:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e948bfc9-463d-4cbb-bceb-36c73c9abeee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:24:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e948bfc9-463d-4cbb-bceb-36c73c9abeee","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:24:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e948bfc9-463d-4cbb-bceb-36c73c9abeee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-aa49c3/ipp-route-aa49c3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-aa49c3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T15:24:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e948bfc9-463d-4cbb-bceb-36c73c9abeee","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T15:24:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e948bfc9-463d-4cbb-bceb-36c73c9abeee","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-aa49c3-sub"} {"level":"debug","ts":"2026-07-28T15:24:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e948bfc9-463d-4cbb-bceb-36c73c9abeee","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T15:24:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e948bfc9-463d-4cbb-bceb-36c73c9abeee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4d28f3ab-cd7d-4cd8-8c38-366769374284","keyName":"e2e-ipp-aa49c3","selected_subscription":"ipp-route-aa49c3-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-aa49c3/ipp-route-aa49c3-sub@ai-tenant-e2e-ipp-a-aa49c3/ipp-route-aa49c3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-aa49c3/models/facebook/opt-125m","name":"ipp-route-aa49c3","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-aa49c3-sub","namespace":"ai-tenant-e2e-ipp-a-aa49c3","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-aa49c3/ipp-route-aa49c3"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-28T15:24:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e948bfc9-463d-4cbb-bceb-36c73c9abeee","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T15:24:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e948bfc9-463d-4cbb-bceb-36c73c9abeee","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T15:26:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bb8faf3f8ea2022299d6c861bd87e8604dc020d1cabe2ab3a2ce1566d844dc7"} {"level":"info","ts":"2026-07-28T15:26:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da6a494f8350eba176597ec588f6939d6b1ecee946baa201b5bac6bc5b3301f1"} {"level":"info","ts":"2026-07-28T15:26:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6db683e06538641b98f7de7402b19acb55a8e83e82febf3eba3420426bf4b585"} {"level":"info","ts":"2026-07-28T15:26:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70bfdfcf7ce9c7fc65fd922b6c80d9ed4f169a68768fd99e52be76f529dbeac1"} {"level":"info","ts":"2026-07-28T15:26:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b07946358aa1770e2d900b8a177a232c8c6529978632c886f7a2bc0d23ac924"} {"level":"info","ts":"2026-07-28T15:26:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5fb8dc8cd951dac26caf980acfaf92df5e5404a9294c8bc1efe92a4f3e702578"} {"level":"info","ts":"2026-07-28T15:26:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c464e8eea35a5482e7287f9b7b216008d13f0b7d50f3b39d302152b98236311"} {"level":"info","ts":"2026-07-28T15:26:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf3c7fcdf291b7468abb062f1f3948dfdf4fa1d1b3a8bd3711dbf67a024da682"} {"level":"info","ts":"2026-07-28T15:26:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64bc5edae0c4ee2d532ab11f7529e2012d3a9c87a03e9d516d057f23e293e9ee"} {"level":"info","ts":"2026-07-28T15:26:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b77991b32c82ace2f17c711bd2b45a60284f993bebf7e300e3f1c7eeea17e21"} {"level":"info","ts":"2026-07-28T15:26:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58d8a65d752ab00dfa448cac9e2b327ef7fdcc127c4530b77fbba141798413d0"} {"level":"info","ts":"2026-07-28T15:26:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f7c1adde59b679e1b4c4eb9014dbc8d3e8685067f927cd71d9b065d11b9bc2f"}